CVE-2026-58510

GHSA-8fwc-qjw5-rvgp ClearRepoWatches fix not applied to API EditRepo path — sister code path retains stale watches on public->private

Scoring

Severity

MEDIUM

CVSS base score

4.3

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

EPSS probability

0.21%

CWE

CWE-200, CWE-281, CWE-359

Published

2026-08-13

Last modified

2026-08-13

Affected products

• Gitea Gitea Open Source Git Server

Weakness type

• CWE-200
• CWE-281
• CWE-359

Related vulnerabilities

• CVE-2026-0305 — Prisma Access Agent: Information Disclosure Vulnerability on Linux
• CVE-2026-87017 — Open WebUI: Inaccessible knowledge bases are exposed through the built-in knowledge tool on most vector backends
• CVE-2026-86767 — Snipe-IT before 8.7.0 Cross-Company Read via requested-assets
• CVE-2026-87820 — CyberPanel 2.4.3 through 2.4.5 Information Disclosure via AI Scanner
• CVE-2026-87810 — Siyuan before v3.8.2 Information Disclosure via fullTextSearchBlock
• CVE-2026-87032 — Tanium addressed an information disclosure vulnerability in Tanium Server.
• CVE-2026-87035 — Tanium addressed an information disclosure vulnerability in Comply.
• CVE-2026-87593 — Information leak in Editing in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to...

Markdown version · Browse all CVEs