CVE-2026-58439

CVE-2026-58439 concerns Gitea’s branch protection: when a PR’s target branch is changed, the existing official approval flag is not re-evaluated, allowing a non-whitelisted user’s approval to satisfy protected-branch policies after retargeting. Affected component is pull-request review handling i...

CVE-2026-58439 Branch Protection Bypass via PR Retargeting Preserves Stale `official` Approval Flag

Branch Protection Bypass via PR Retargeting Preserves Stale official Approval Flag...