PT-2026-63294

Name of the Vulnerable Software and Affected Versions Gitea versions prior to 1.26.2 Description An issue exists where the OAuth token introspection endpoint allows any authenticated OAuth client to retrieve metadata for tokens issued to other clients, violating RFC 7662 section 4. The server fai...