PUBLISHED
2026-08-13 17:17
MODIFIED
2026-08-13 17:17
EPSS (Prob. Exploit)
0.33%
Top 73.7%
> DESCRIPTION
GHSA-8fwc-qjw5-rvgp ClearRepoWatches fix not applied to API EditRepo path — sister code path retains stale watches on public->private
> AFFECTED_PRODUCTS
ℹ️ Aucun produit affecté n'a encore été publié par NVD pour cette CVE.
> CWE DETAILED DESCRIPTIONS
CWE-200: Exposure of Sensitive Information to an Unauthorized Actor - The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information. | CWE-281: Improper Preservation of Permissions - The product does not preserve permissions or incorrectly preserves permissions when copying, restoring, or sharing objects, which can cause them to have less restrictive permissions than intended. | CWE-359: Exposure of Private Personal Information to an Unauthorized Actor - The product does not properly prevent a person's private, personal information from being accessed by actors who either (1) are not explicitly authorized to access the information or (2) do not have the implicit consent of the person about whom the information is collected.
> GITHUB SECURITY ADVISORY
GHSA-q423-49rw-g9mh
MODERATE
Gitea: GHSA-8fwc-qjw5-rvgp ClearRepoWatches fix not applied to API EditRepo path — sister code path retains stale watches on public->private
AFFECTED PACKAGES:
GO / code.gitea.io/gitea
< 1.27.0
Fixed in: 1.27.0
> OSV (GOOGLE OPEN SOURCE VULNERABILITIES)
GHSA-8fwc-qjw5-rvgp ClearRepoWatches fix not applied to API EditRepo path — sister code path retains stale watches on public->private
AFFECTED PACKAGES:
Unknown / Unknown
38 versions affected
ALIASES:
GHSA-q423-49rw-g9mh, GO-2026-6069
> HISTORIQUE DES MODIFICATIONS
Première apparition
13/08/2026 17:17
Source: NVD
📊
ENRICHISSEMENT
01/09/2026 06:02
CWE
Champ modifié: Description CWE
Nouvelle valeur:
CWE-200: Exposure of Sensitive Information to an Unauthorized Actor - The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information. | CWE-...
Total des modifications: 1
Dernière mise à jour: 2 months ago