CVE-2026-97859: Gitea 0 through 1.27.2

Affected technology

Gitea · 0 through 1.27.2
Gitea

Component: Not specified by the source

What an attacker can do

An authenticated user could therefore read the followers, following list, starred and watched repositories and public SSH and GPG keys of a user with limited or private visibility, whom they could not otherwise see.

Published 18-Oct-2026 20:24 UTC

CWE: CWE-862
KEV: no

Provenance

NVD CVE API 2.0 · Source record · observed 2026-10-18 20:23:06.032219+00:00 UTC

Stable permalink: https://cybercodered.org/item/cve-cve-2026-97859.html