Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2026-27761
4.3
MEDIUMCVSS v3
Published
July 3, 2026
Affected
1 project
Assigned by
88ee5874-cf24-4952-aea0-31affedb7ff2
Severity scale
010
Description
Gitea versions up to and including 1.26.2 allow repository RSS and Atom feed endpoints to bypass API access token scope checks, exposing private repository commit data to tokens without the required repository scope.
go-gitea/gitea
GitHubGit with a cup of tea! Painless self-hosted all-in-one software development service, including Git hosting, code review, team collaboration, package registry and CI/CD
GitHubGit with a cup of tea! Painless self-hosted all-in-one software development service, including Git hosting, code review, team collaboration, package registry and CI/CDNVD