CVE-2026-0798 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

Gitea may send release notification emails for private repositories to users whose access has been revoked. When a repository is changed from public to private,…
Low CVSS: 3.5

CVE-2026-0798

Gitea may send release notification emails for private repositories to users whose access has been revoked. When a repository is changed from public to private, users who previously watched the repository may continue to receive release notifications, potentially disclosing release titles, tags, and content.
Vendor
Gitea
Product
Gitea
CWE
CWE-284
Yayın Tarihi
2026-01-22 22:16:15
Güncelleme
2026-01-29 21:59:24
Source Identifier
88ee5874-cf24-4952-aea0-31affedb7ff2
KEV Date Added
-

Kategoriler

CWE-284 Gitea LOW Gitea 2026

Referanslar

https://blog.gitea.com/release-of-1.25.4/ https://github.com/go-gitea/gitea/pull/36319 https://github.com/go-gitea/gitea/releases/tag/v1.25.4 https://github.com/go-gitea/gitea/security/advisories/GHSA-f4wq-6ww5-m56p