CVE-2026-0798 — Gitea Release Email Notifications Leak Private Repository Release Details After Access Revocation
Gitea may send release notification emails for private repositories to users whose access has been revoked. When a repository is changed from public to private, users who previo…
Published: 2026-01-22 · CVSS: 3.5 · CVSS 3.1
Gitea may send release notification emails for private repositories to users whose access has been revoked. When a repository is changed from public to private, users who previously watched the repository may continue to receive release notifications, potentially disclosing release titles, tags, and content.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7