Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2026-28740
7.1
HIGHCVSS v3
Published
July 3, 2026
Affected
1 project
Assigned by
88ee5874-cf24-4952-aea0-31affedb7ff2
Severity scale
010
Description
Gitea versions up to and including 1.26.2 allow Git LFS object reuse to authorize private source objects for users who have repository access but lack Code-unit access.
go-gitea/gitea
GitHubGit with a cup of tea! Painless self-hosted all-in-one software development service, including Git hosting, code review, team collaboration, package registry and CI/CD
GitHubGit with a cup of tea! Painless self-hosted all-in-one software development service, including Git hosting, code review, team collaboration, package registry and CI/CDNVD