Vulnerability advisory
GO-2026-5321
Gitea: Git Smart HTTP Skips Repository Token Scopes for Bearer Tokens in code.gitea.io/gitea
Also known as CVE-2026-28744GHSA-cc8w-r4qh-3v65
Severity
Severity not reported.
Affected versions
| Affected | Fixed in |
|---|---|
| All versions before 1.26.2 | 1.26.2 |
Description
Gitea: Git Smart HTTP Skips Repository Token Scopes for Bearer Tokens in code.gitea.io/gitea