CVE-2026-117649

The Gitea issue timeline API and web issue page are vulnerable to information disclosure due to improper filtering of "dependency added" and "dependency removed" events. When a readable issue is linked as a dependency to an issue in a restricted repository (e.g., a private one), unauthorized user...