medium4.3
CVE-2026-58431
Gitea: Public-only API token restriction is not enforced on team API routes
Impact
Public-only API token restriction is not enforced on team API routes
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| go | gitea.dev | < 1.27.0 | 1.27.0 |