Vulnerability advisory
GO-2026-4365
Gitea may send release notification emails for private repositories to users whose access has been revoked in code.gitea.io/gitea
Also known as BIT-gitea-2026-0798CVE-2026-0798GHSA-8fwc-qjw5-rvgpGHSA-f4wq-6ww5-m56p
Severity
Severity not reported.
Affected versions
| Affected | Fixed in |
|---|---|
| All versions before 1.25.4 | 1.25.4 |
Description
Gitea may send release notification emails for private repositories to users whose access has been revoked in code.gitea.io/gitea