GO-2026-6066

Gitea: Private Repository Existence Disclosure via go-get Meta Endpoint in gitea.dev

At a glance

Published
Updated
CVE
CVE-2026-58507
Aliases
GHSA-p4mj-98mv-xq26

Description

Gitea: Private Repository Existence Disclosure via go-get Meta Endpoint in gitea.dev

Affected packages

PackageVersions
Go · gitea.devintroduced 0, fixed 1.27.0

References

Sources

SourceLicence
OSV.devCC-BY 4.0 — Go Vulnerability Database