tocsin

CVE-2026-57897

2 advisories.

Go/code.gitea.io/gitea CVE-2026-57897: medium 6.5

Gitea: Cross-Repo Information Disclosure via Org-Level Actions Run/Job APIs

Action: Upgrade code.gitea.io/gitea to 1.27.0 or later.

go get code.gitea.io/gitea@v1.27.0

Affected

introducedfixedlast affected
01.27.0-

Fixed versions

1.27.0

Sources

CVE-2026-57897 · published · modified · JSON

Go/gitea.dev CVE-2026-57897: unknown

Gitea: Cross-Repo Information Disclosure via Org-Level Actions Run/Job APIs in gitea.dev

Action: Upgrade gitea.dev to 1.27.0 or later.

go get gitea.dev@v1.27.0

Affected

introducedfixedlast affected
01.27.0-

Fixed versions

1.27.0

Sources

CVE-2026-57897 · published · modified · JSON