← Database

CVE-2026-27771

HIGH CVSS: 8.2 Published: 2026-07-03 Modified: 2026-07-07

Description

Gitea versions up to and including 1.26.1 have insufficient permission checks for Composer package source links, which can expose private or internal package source information.

Affected Platforms

Unknown

Weakness Type

CWE-862

References