Vulnerability advisory
GO-2026-6079
Gitea: OAuth token introspection returns metadata of tokens issued to other clients (RFC 7662 section 4 violation) in gitea.dev
Also known as CVE-2026-58425GHSA-vxv2-8j6r-pcpg
Severity
Severity not reported.
Affected versions
gitea.dev Go
| Affected | Fixed in |
|---|---|
| All versions before 1.27.0 | 1.27.0 |
Description
Gitea: OAuth token introspection returns metadata of tokens issued to other clients (RFC 7662 section 4 violation) in gitea.dev