CVE-2026-58425

OAuth token introspection returns metadata of tokens issued to other clients (RFC 7662 section 4 violation)

Title source: CVE List
STIX 2.1 vulnerability

Description

OAuth token introspection returns metadata of tokens issued to other clients (RFC 7662 section 4 violation)

Description source: CVE List

Affected products and versions

2
ProductSourceVersion range

Gitea Open Source Git Server

Browse Gitea / Gitea Open Source Git Server

Default status: unaffected

CVE ListThrough 1.26.4affected

code.gitea.io/gitea

Browse Go / code.gitea.io/gitea
GitHub AdvisoryBefore 1.27.0 · Fixed in 1.27.0affected

References

6