Skip to content
EXPLOIT
.CC
CVEs
Search
About
synced 12 MIN AGO
T-12M
01
Record
STATE: —
02
Description
SRC: CNA
03
Metadata
SCHEMA: CVE JSON 5
04
Affected products
PAIRS: —
05
References
REFS: —
01
Record
STATE: PUBLISHED
CVE-2026-58431
Public-only API token restriction is not enforced on team API routes
Unrated
PUBLISHED
CNA: Gitea
Base score
Unrated
No CVSS vector published
View raw JSON
CVE Program record
02
Description
CNA: Gitea
Public-only API token restriction is not enforced on team API routes
03
Metadata
SCHEMA: 5.2
Published
2026-08-13 16:44Z
1 DAY AGO
Last updated
2026-08-13 16:44Z
1 DAY AGO
Reserved
2026-06-30
Assigning CNA
Gitea
Record state
PUBLISHED
Severity
Unrated — no CVSS score published
CVSS vector
Not published
Weaknesses
CWE-863
SSVC decision
No CISA-ADP assessment
Data version
5.2
Document digest
a2dfa3a202fddd55651ab399fcf18478fa6ffa7712e17585d8685ed73518b90e
04
Affected products
PAIRS: 1
Vendor
Product
Versions
Platforms
Gitea
Gitea Open Source Git Server
0 to 1.26.4
—
05
References
REFS: 3
github.com
GitHub Security Advisory
https://github.com/go-gitea/gitea/security/advisories/GHSA-h56g-4qw7-2mxg
vendor-advisory
github.com
Gitea v1.27.0 Release
https://github.com/go-gitea/gitea/releases/tag/v1.27.0
release-notes
blog.gitea.com
Gitea v1.27.0 Release Blog Post
https://blog.gitea.com/gitea-1.27.0-is-released/
release-notes