Gitea: API Fork Endpoint Authorization Bypass Allows Organization Members to Bypass Repository Creation Restrictions in code.gitea.io/gitea

Description

References

• go-gitea/gitea security advisory · ADVISORY
• go-gitea/gitea commit 686d10b · WEB
• go-gitea/gitea#36950 · WEB
• go-gitea/gitea release v1.26.0 · WEB

code.gitea.io/gitea 的其他漏洞

• CVE-2026-59766中危 4.3Gitea's starred-repository and tracked-time API endpoints do not re-check current repository permissions before returning data associated wi…
• CVE-2026-60004严重 9.8EXPLOITED (CISA KEV)Gitea before 1.27.1 allows remote code execution via the diffpatch API through Git hook installation.
• CVE-2026-59763中危 4.3Unbounded Arch package file metadata can cause resource amplification in Gitea package uploads
• CVE-2026-58511低危 2.7Webhook Authorization Header Returned in Plaintext via API
• CVE-2026-58510中危 4.3GHSA-8fwc-qjw5-rvgp ClearRepoWatches fix not applied to API EditRepo path — sister code path retains stale watches on public->private