CVE record · 1 source
CVE-2026-112887
Gitea Actions task tokens authenticate to the REST API as a shared system user with a negative ID, which repository, organization, project and key…
- Vendor
- Gitea
- Product
- Gitea
- Weakness
- CWE-200, CWE-862
- Exposure class
- Developer platform
Coverage
1Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.
-
Gitea Actions task tokens authenticate to the REST API as a shared system user with a negative ID, which repository, organization, project and key…
Gitea Actions task tokens authenticate to the REST API as a shared system user with a negative ID, which repository, organization, project and key filters treated as having no owner restriction, and the token carried no API scope…