[CVE-2026-27771] Gitea versions up to and including 1.26.1 have insufficient permission checks for Composer package s…

Descripción técnica

Gitea versions up to and including 1.26.1 have insufficient permission checks for Composer package source links, which can expose private or internal package source information.

Puntuación CVSS

Score: 8.2/10 — Severidad: HIGH — Estado NIST: Deferred

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N

Debilidades (CWE)

CWE-862

Fuente oficial

Publicado en NIST NVD.