CVE-2026-119533

Gitea repository and organization project boards were vulnerable to a missing authorization flaw (CWE-862) where they displayed pull requests referencing issues without verifying the viewer's permissions. If a public board contained an issue linked to a private pull request , anonymous visitors c...