01 Record

CVE-2026-58438

Cross-repository IDOR in issue-dependency removal lets an attacker tamper with and comment on private repos they cannot access

UnratedPUBLISHEDCNA: Gitea

Base scoreUnratedNo CVSS vector published

02 Description

Cross-repository IDOR in issue-dependency removal lets an attacker tamper with and comment on private repos they cannot access

Published: 2026-08-13 16:44Z1 DAY AGO
Last updated: 2026-08-13 16:44Z1 DAY AGO
Reserved: 2026-06-30
Assigning CNA: Gitea
Record state: PUBLISHED
Severity: Unrated — no CVSS score published
CVSS vector: Not published
Weaknesses: CWE-862
SSVC decision: No CISA-ADP assessment
Data version: 5.2
Document digest: d55a3703d8ad8442f0a93e0eff1c2ed8f6193080f2c303596a1cc3937b884567

VendorProductVersionsPlatforms