tocsin

CVE-2026-22555

2 advisories.

Go/code.gitea.io/gitea CVE-2026-22555: high 8.1, EPSS 0.43%

Gitea: API Fork Missing CanCreateOrgRepo Check Allows Org Secret Exfiltration

Action: Upgrade code.gitea.io/gitea to 1.26.0 or later.

go get code.gitea.io/gitea@v1.26.0

Affected

introducedfixedlast affected
01.26.0-

Fixed versions

1.26.0

Sources

CVE-2026-22555 · published · modified · JSON

Go/code.gitea.io/gitea CVE-2026-22555: unknown, EPSS 0.43%

Gitea: API Fork Missing CanCreateOrgRepo Check Allows Org Secret Exfiltration in code.gitea.io/gitea

Action: Upgrade code.gitea.io/gitea to 1.26.0 or later.

go get code.gitea.io/gitea@v1.26.0

Affected

introducedfixedlast affected
01.26.0-

Fixed versions

1.26.0

Sources

CVE-2026-22555 · published · modified · JSON