Threats tagged 'ghsa-jr5x-6h83-wrxf'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
High	7.5	EPSS 0.5%	CVE-2026-58417Gitea · REST API exposes organization membership of private organizations to public High7.5EPSS 0.5%2026-07-21GCVE DatabaseCVE-2026-58417 A vulnerability in Gitea versions prior to 1.27.0 allows unauthorized users with API access tokens to confirm membership of users in private organizations via a REST API endpoint. This membership information is otherwise hidden in the web interface for private organizations. The flaw is fixed in version 1.27.0. EPSS 0.5%Report on CVE-2026-58417 Vulnerability CWE-200 #ghsa-jr5x-6h83-wrxf #go	GCVE Database	2026-07-21

Page 1 of 1