CVE-2026-58510

MediumCVSS 4.3

Published: 13/08/2026(UTC)Updated: 13/08/2026(UTC)Translated: 13/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.19%

9th percentile - higher than 9% of all known CVEs

GHSA-8fwc-qjw5-rvgp ClearRepoWatches fix not applied to API EditRepo path — sister code path retains stale watches on public->private.

Users may continue to watch a repository after it is made private, potentially leading to unauthorized access to change information.

Apply the ClearRepoWatches fix to the API EditRepo path as well and update Gitea.

Original NVD description (English source)

GHSA-8fwc-qjw5-rvgp ClearRepoWatches fix not applied to API EditRepo path — sister code path retains stale watches on public->private