CVE record · 1 source
CVE-2026-116296
The API routes for releases, release assets, milestones and repository labels did not reject changes to archived repositories.
- Vendor
- Gitea
- Product
- Gitea
- Weakness
- CWE-862
- Exposure class
- Developer platform
Coverage
1Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.
-
The API routes for releases, release assets, milestones and repository labels did not reject changes to archived repositories.
The API routes for releases, release assets, milestones and repository labels did not reject changes to archived repositories. A user with write access to an archived repository, or a holder of such a user's write-scoped token…