tocsin

CVE-2026-26231

2 advisories.

Go/code.gitea.io/gitea CVE-2026-26231: high 8.5

Gitea: Authorization Bypass via "Allow edits from maintainers" allows unauthorized commits to any readable repo

Action: Upgrade code.gitea.io/gitea to 1.26.2 or later.

go get code.gitea.io/gitea@v1.26.2

Affected

introducedfixedlast affected
01.26.2-

Fixed versions

1.26.2

Sources

CVE-2026-26231 · published · modified · JSON

Go/code.gitea.io/gitea CVE-2026-26231: unknown

Gitea: Authorization Bypass via "Allow edits from maintainers" allows unauthorized commits to any readable repo in code.gitea.io/gitea

Action: Upgrade code.gitea.io/gitea to 1.26.2 or later.

go get code.gitea.io/gitea@v1.26.2

Affected

introducedfixedlast affected
01.26.2-

Fixed versions

1.26.2

Sources

CVE-2026-26231 · published · modified · JSON