En resumen
- CVE-2026-0798 es una vulnerabilidad BAJO (CVSS 3.5) que afecta a code.gitea.io/gitea, gitea (gitea).
- Probabilidad de explotación en los próximos 30 días (EPSS): 0.27%, mayor que el 18.4% de las vulnerabilidades.
- Solución: actualizar a 1.25.4 o posterior.
Description
Gitea may send release notification emails for private repositories to users whose access has been revoked. When a repository is changed from public to private, users who previously watched the repository may continue to receive release notifications, potentially disclosing release titles, tags, and content.
NVD description
Gitea may send release notification emails for private repositories to users whose access has been revoked. When a repository is changed from public to private, users who previously watched the repository may continue to receive release notifications, potentially disclosing release titles, tags, and content.
Más vulnerabilidades de code.gitea.io/gitea
Ver todo →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free