Security Advisory
CVE-2026-58426
9.6
CRITICAL
Vulnerability Description
Gitea Actions Artifacts V4 signed URL HMAC ambiguity allows cross-repository artifact read and cross-task upload-state write
Published Date
July 3, 2026
Official Source
NIST NVD Advisory