Skip to content
EXPLOIT
.CC
CVEs
Search
About
synced 10 MIN AGO
T-10M
01
Record
STATE: —
02
Description
SRC: CNA
03
Metadata
SCHEMA: CVE JSON 5
04
Affected products
PAIRS: —
05
References
REFS: —
01
Record
STATE: PUBLISHED
CVE-2026-58443
Public-only repository tokens can update private PR head branches
Unrated
PUBLISHED
CNA: Gitea
Base score
Unrated
No CVSS vector published
View raw JSON
CVE Program record
02
Description
CNA: Gitea
Public-only repository tokens can update private PR head branches
03
Metadata
SCHEMA: 5.2
Published
2026-08-13 16:44Z
1 DAY AGO
Last updated
2026-08-13 16:44Z
1 DAY AGO
Reserved
2026-06-30
Assigning CNA
Gitea
Record state
PUBLISHED
Severity
Unrated — no CVSS score published
CVSS vector
Not published
Weaknesses
CWE-863
SSVC decision
No CISA-ADP assessment
Data version
5.2
Document digest
6fb8a68a7a0e8a465be2d0ac3bb9b83028b22423fc6935fb892862a3b18ff4c5
04
Affected products
PAIRS: 1
Vendor
Product
Versions
Platforms
Gitea
Gitea Open Source Git Server
0 to 1.26.4
—
05
References
REFS: 3
github.com
GitHub Security Advisory
https://github.com/go-gitea/gitea/security/advisories/GHSA-xxjv-752h-3vp2
vendor-advisory
github.com
Gitea v1.27.0 Release
https://github.com/go-gitea/gitea/releases/tag/v1.27.0
release-notes
blog.gitea.com
Gitea v1.27.0 Release Blog Post
https://blog.gitea.com/gitea-1.27.0-is-released/
release-notes