CVE Catalog
CVE-2026-58511
LowCVSS 2.7Exploitation Probability (EPSS)
Low risk0.23%
13th percentile - higher than 13% of all known CVEs
Summary
Webhook Authorization Header Returned in Plaintext via API.
Risk Assessment
Exposure of the authorization header may allow an attacker to capture sensitive credentials and gain unauthorized access.
Recommendation
Update Gitea to a patched version and ensure authorization headers are not returned in API responses.
Original NVD description (English source)
Webhook Authorization Header Returned in Plaintext via API