CVE record · 1 source
CVE-2026-117649
The issue timeline API and the web issue page hid cross-reference events that point at issues the reader cannot access, but not "dependency added"…
- Vendor
- Gitea
- Product
- Gitea
- Weakness
- CWE-200, CWE-862
- Exposure class
- Developer platform
Coverage
1Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.
-
The issue timeline API and the web issue page hid cross-reference events that point at issues the reader cannot access, but not "dependency added"…
The issue timeline API and the web issue page hid cross-reference events that point at issues the reader cannot access, but not "dependency added" and "dependency removed" events. When a readable issue had been linked as a…