CVE Catalog
CVE-2026-58507
MediumCVSS 5.3Exploitation Probability (EPSS)
Low risk0.24%
15th percentile - higher than 15% of all known CVEs
Summary
Private Repository Existence Disclosure via go-get Meta Endpoint.
Risk Assessment
An attacker can confirm the existence of private repositories, violating confidentiality and potentially facilitating further attacks.
Recommendation
Update Gitea to a patched version and restrict access to the go-get Meta endpoint for unauthorized users.
Original NVD description (English source)
Private Repository Existence Disclosure via go-get Meta Endpoint