3 matches found
CVE-2026-58443 Public-only repository tokens can update private PR head branches
Public-only repository tokens can update private PR head branches...
6.6AI score0.00579EPSS
SaveExploits0References3
CVE-2026-58443
The Gitea repository management system is vulnerable to an authorization and token scope bypass where public-only repository tokens can be used to update private PR head branches . This issue impacts the application's access control mechanisms. Remediation is available in Gitea version 1.27.0 , w...
9.1CVSS6.6AI score0.00579EPSS
SaveExploits0References3
20