{"action":"Upgrade code.gitea.io/gitea to 1.27.0 or later.","affected":[{"fixed":"1.27.0","introduced":"0"}],"component":"code.gitea.io/gitea","cve_ids":["CVE-2026-58439"],"ecosystem":"Go","epss":0.00525,"exploited":false,"fixed_versions":["1.27.0"],"ghsa_id":"GHSA-w5pg-649r-p6gg","id":"tcs_01M5KFQ7N19F5VE87YBZV0MYN9","modified_at":"2026-08-04T05:33:10.891923704Z","published_at":"2026-07-21T20:14:12Z","references":["https://osv.dev/vulnerability/GHSA-w5pg-649r-p6gg","https://github.com/go-gitea/gitea/security/advisories/GHSA-w5pg-649r-p6gg","https://github.com/go-gitea/gitea/pull/38319","https://github.com/go-gitea/gitea/pull/38402","https://github.com/go-gitea/gitea/commit/74ad781db9c37134ee9280c69a6b1de53801503e","https://github.com/go-gitea/gitea/commit/8401fe7c544abff1ecc49d7f3166fd4ee0c174ef","https://github.com/go-gitea/gitea","https://github.com/go-gitea/gitea/releases/tag/v1.27.0"],"severity":{"label":"high","score":8.1},"sources":[{"source":"osv","source_id":"GHSA-w5pg-649r-p6gg","url":"https://osv.dev/vulnerability/GHSA-w5pg-649r-p6gg"}],"summary":"Gitea: Branch Protection Bypass via PR Retargeting Preserves Stale `official` Approval Flag"}