Security Advisory
CVE-2026-27771
8.2
HIGH
Vulnerability Description
Gitea versions up to and including 1.26.1 have insufficient permission checks for Composer package source links, which can expose private or internal package source information.
Published Date
July 3, 2026
Official Source
NIST NVD Advisory