6 matches found
GHSA-V73X-HX65-6PF4 Gitea: Unauthorized Access to Labels of Private Organizations
Summary Gitea 1.26.2 does not properly enforce organization visibility restrictions on organization label read endpoints. A user without access to a private organization can retrieve labels belonging to that organization through the Organization Labels API. As a result, label metadata intended to...
EUVD-2026-41621
Gitea: Unauthorized Access to Labels of Private Organizations...
Missing Authorization
Overview Affected versions of this package are vulnerable to Missing Authorization via the label process. An attacker can obtain sensitive information by accessing labels associated with private organizations without proper authorization. Remediation Upgrade github.com/go-gitea/gitea/routers to...
CVE-2026-25038
Gitea 1.26.2 allows unauthorized users to access labels of private organizations...
