CVE-2026-27771

תיאור (מקור, אנגלית)

Gitea versions up to and including 1.26.1 have insufficient permission checks for Composer package source links, which can expose private or internal package source information.

מדדים

EPSS — סבירות ניצול

43% (אחוזון 100) נכון ל-16/8/2026

CWE

CWE-862

קישורים

• https://blog.gitea.com/release-of-1.26.2/
• https://github.com/go-gitea/gitea/pull/37610
• https://github.com/go-gitea/gitea/releases/tag/v1.26.2
• https://github.com/go-gitea/gitea/security/advisories/GHSA-8qw8-rq86-9pc2