ByteOS Network

CVE Vulnerability Details :

CVE-2026-27783

PUBLISHED

Assigner-Gitea

Published At-03 Jul, 2026 | 20:19

Updated At-03 Jul, 2026 | 20:19

▼CVE Numbering Authority (CNA)

Gitea issue-template APIs bypass repository unit authorization

Gitea versions up to and including 1.26.1 do not enforce repository-unit authorization on issue-template API endpoints.

Vendor

Product

Default Status

unaffected

Versions

Type	CWE ID	Description
CWE	CWE-862	CWE-862

Type: CWE

CWE ID: CWE-862

Description: CWE-862

Version	Base score	Base severity	Vector
3.1	4.3	MEDIUM	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Version: 3.1

Base score: 4.3

Base severity: MEDIUM

Vector:

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

reporter

hoangperry

Hyperlink	Resource
https://github.com/go-gitea/gitea/security/advisories/GHSA-3fwp-p5rj-2pxf	vendor-advisory
https://github.com/go-gitea/gitea/pull/37769	patch
https://github.com/go-gitea/gitea/pull/37781	patch
https://github.com/go-gitea/gitea/releases/tag/v1.26.2	release-notes
https://blog.gitea.com/release-of-1.26.2/	release-notes