Gitea v1.27.0 Release Blog Postrelease notes
https://blog.gitea.com/gitea-1.27.0-is-released CVE-2026-58510
MEDIUM
GHSA-8fwc-qjw5-rvgp ClearRepoWatches fix not applied to API EditRepo path — sister code path retains stale watches on public->private
Record summary
CVE-2026-58510 has a selected CVSS score of 4.3 (medium).
Description
GHSA-8fwc-qjw5-rvgp ClearRepoWatches fix not applied to API EditRepo path — sister code path retains stale watches on public->private
Description source: CVE List
Exploitation context
CISA SSVC decision
ExploitationPoC
AutomatableNo
Technical impactPartial
CISA Coordinator · SSVC 2.0.3 · Evaluated Aug 13, 2026 · Source: CVE List
Affected products and versions
2| Product | Source | Version range | Status |
|---|---|---|---|
Gitea Open Source Git ServerBrowse Gitea / Gitea Open Source Git ServerDefault status: unaffected | CVE List | Through 1.26.4 | affected |
code.gitea.io/giteaBrowse Go / code.gitea.io/gitea | GitHub Advisory | Before 1.27.0 · Fixed in 1.27.0 | affected |
References
4github.com
https://github.com/go-gitea/gitea Gitea v1.27.0 Releaserelease notes
https://github.com/go-gitea/gitea/releases/tag/v1.27.0 GitHub Security AdvisoryVendor advisory
https://github.com/go-gitea/gitea/security/advisories/GHSA-q423-49rw-g9mh