Gitea v1.27.0 Release Blog Postrelease notes
https://blog.gitea.com/gitea-1.27.0-is-released CVE-2026-58434
Private Repository Metadata Remains Accessible After Access Revocation
Description
Private Repository Metadata Remains Accessible After Access Revocation
Description source: CVE List
Affected products and versions
2| Product | Source | Version range | Status |
|---|---|---|---|
Gitea Open Source Git ServerBrowse Gitea / Gitea Open Source Git ServerDefault status: unaffected | CVE List | 1.26.2 | affected |
code.gitea.io/giteaBrowse Go / code.gitea.io/gitea | GitHub Advisory | Before 1.27.0 · Fixed in 1.27.0 | affected |
References
8github.com
https://github.com/go-gitea/gitea github.com
https://github.com/go-gitea/gitea/commit/362539b78e50dfcc4bd1b9368fdd2a1b8cab0129 github.com
https://github.com/go-gitea/gitea/commit/500a09e044156d7a8d6eb58d67a28b8a1512c887 github.com
https://github.com/go-gitea/gitea/pull/38321 github.com
https://github.com/go-gitea/gitea/pull/38390 Gitea v1.27.0 Releaserelease notes
https://github.com/go-gitea/gitea/releases/tag/v1.27.0 GitHub Security AdvisoryVendor advisory
https://github.com/go-gitea/gitea/security/advisories/GHSA-j2w3-9c3r-g83q