Notification API Vulnerability in Gitea by Gitea
CVE-2026-58419

Currently unrated

Key Information:

Vendor: Gitea
Status: Gitea Open Source Git Server
Vendor: CVE Published:; 3 July 2026

What is CVE-2026-58419?

The Notification API in Gitea has been found to expose private issue metadata even after access has been revoked. This vulnerability could lead to unauthorized information exposure, allowing users to gain insights into sensitive data that should not be accessible. It is essential for administrators to be aware of this flaw and apply updates to protect their Gitea instances from potential misuse.

Affected Version(s)

Gitea Open Source Git Server 1.26.2

References

https://github.com/go-gitea/gitea/security/advisories/GHS...

vendor-advisory

https://github.com/go-gitea/gitea/pull/38108

patch

https://github.com/go-gitea/gitea/releases/tag/v1.26.4

release-notes

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Jul 3, 2026
Vulnerability Reserved
Jun 30, 2026

Credit

ybsun0215

CVE-2026-58419 Data

JSON