VYPR
← All advisories
High severity8.1NVD Advisory· Published Jul 3, 2026· Updated Jul 6, 2026

CVE-2026-22555

CVE-2026-22555

Description

Gitea versions before 1.26.0 allow API users to fork a repository into an organization without first passing the CanCreateOrgRepo check, which can expose organization secrets.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

PackageAffected versionsPatched versions
code.gitea.io/giteaGo
< 1.26.01.26.0

Affected products

3

Patches

Vulnerability mechanics

References

5

News mentions

1