Vulnerability GO-2026-6063
Unknown
UNKNOWN RISK
Vulnerabilities without an assigned CVSS score. Severity is not determinable from available data.
2 months ago
July 27, 2026 at 03:32 PM UTC
Gitea: REST API exposes organization membership of private organizations to public in gitea.dev
v0.9.99 - v1.27.0-rc0
v0.9.99 - v1.27.0-rc0
Summary
Gitea: REST API exposes organization membership of private organizations to public in gitea.dev
Details
Gitea: REST API exposes organization membership of private organizations to public in gitea.dev
Related Vulnerabilities
Other vulnerabilities affecting the same packages
Unknown
1 month ago
Gitea: Remote Code Execution via diffpatch Git Hook Installation in gitea.dev
v0.9.99 - v1.27.0 GO-2026-6433
v0.9.99 - v1.27.0 GO-2026-6433
Critical
1 month ago
Gitea: Remote Code Execution via diffpatch Git Hook Installation
v1.17.0 - v1.27.0 GHSA-rcr6-4jqh-j84m
v1.17.0 - v1.27.0 GHSA-rcr6-4jqh-j84m
Unknown
2 months ago
Gitea: Repository migration SSRF via multi-answer DNS allow-list bypass in gitea.dev
v0.9.99 - v1.27.0-rc0 GO-2026-6058
v0.9.99 - v1.27.0-rc0 GO-2026-6058
Unknown
2 months ago
Gitea: Public-only API token restriction is not enforced on team API routes in gitea.dev
v0.9.99 - v1.27.0-rc0 GO-2026-6059
v0.9.99 - v1.27.0-rc0 GO-2026-6059
Unknown
2 months ago
Gitea: Private Repository Metadata Remains Accessible After Access Revocation in gitea.dev
v0.9.99 - v1.27.0-rc0 GO-2026-6062
v0.9.99 - v1.27.0-rc0 GO-2026-6062
Impacted packages
Timeline
Published
2 months ago
July 27, 2026 at 03:32 PM UTC
Last Modified
2 months ago
July 27, 2026 at 05:00 PM UTC