CVSS 3.1
3.5 lowCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:NCVE-2026-0798
Low (3.5) in gitea gitea. EPSS 0.3% chance of exploitation in the next 30 days. Fixed in code.gitea.io/gitea 1.25.4.
Gitea may send release notification emails for private repositories to users whose access has been revoked. When a repository is changed from public to private, users who previously watched the repository may continue to receive release notifications, potentially disclosing release titles, tags, and content.
Severity
- EPSS
- 0.3% chance of exploitation in the next 30 days; higher than 18% of CVEs (scores of 2026-10-31)
- CWE
- CWE-284
- Published
- Modified
- Record from
- the NVD, synced
Affected
- gitea:gitea
Packages (OSV)
| Advisory | Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|---|
| GHSA-8fwc-qjw5-rvgp | Go | code.gitea.io/gitea | <1.25.4 | 1.25.4 |
| GO-2026-4365 | Go | code.gitea.io/gitea | <1.25.4 | 1.25.4 |