CVE-2026-59766
MEDIUM SEVERITYCVSS Score & Metrics
Base Score
4.3 / 10
Vulnerability Description
Gitea CVE-2026-20800 sibling endpoints not covered: revoked user still reads private repo objects via `/api/v1/user/starred` and private issue titles via `/api/v1/user/times`
Vulnerability Details
Published Date
Last Modified
Source
GitHub
Vendor
go
Product
code.gitea.io/gitea
Discussion (0)
Add Comment
No comments yet. Be the first!