tocsin

CVE-2026-58435

2 advisories.

Go/code.gitea.io/gitea CVE-2026-58435: medium 5.4, EPSS 0.29%

Gitea LFS Deploy-Key Privilege Escalation

Action: Upgrade code.gitea.io/gitea to 1.27.0 or later.

go get code.gitea.io/gitea@v1.27.0

Affected

introducedfixedlast affected
01.27.0-

Fixed versions

1.27.0

Sources

CVE-2026-58435 · published · modified · JSON

Go/gitea.dev CVE-2026-58435: unknown, EPSS 0.29%

Gitea LFS Deploy-Key Privilege Escalation in gitea.dev

Action: Upgrade gitea.dev to 1.27.0 or later.

go get gitea.dev@v1.27.0

Affected

introducedfixedlast affected
01.27.0-

Fixed versions

1.27.0

Sources

CVE-2026-58435 · published · modified · JSON