CVE record · 1 source
CVE-2026-116289
Gitea did not reject personal access tokens restricted to public resources (`public-only`) on the organization Actions runner registration-token…
- Vendor
- Gitea
- Product
- Gitea
- Weakness
- CWE-863
- Exposure class
- Developer platform
Coverage
1Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.
-
Gitea did not reject personal access tokens restricted to public resources (`public-only`) on the organization Actions runner registration-token…
Gitea did not reject personal access tokens restricted to public resources (`public-only`) on the organization Actions runner registration-token endpoint, and the runner registered with the resulting token was not limited to…