CVE-2026-24791

LLM-synthesized narrative grounded in this CVE's description and references.

Versions sourced from the GitHub Security Advisory.

• osv-coords2 versions

  pkg:rpm/opensuse/govulncheck-vulndb&distro=openSUSE%20Leap%2016.0pkg:golang/code.gitea.io/gitea

  < 0.0.20260723T184607-160000.1.1+ 1 more

  • (no CPE)range: < 0.0.20260723T184607-160000.1.1
  • (no CPE)range: >= 1.22.3, < 1.26.2
• Go Gitea/Giteallm-fuzzy

  Range: <=1.26.1

• github.com/advisories/GHSA-wrr5-99h5-gq57ghsaADVISORY
• github.com/go-gitea/gitea/security/advisories/GHSA-wrr5-99h5-gq57nvdWEB
• blog.gitea.com/release-of-1.26.2/nvd
• github.com/go-gitea/gitea/pull/37118nvd
• github.com/go-gitea/gitea/releases/tag/v1.26.2nvd

• Gitea: Ten CVEs Disclosed Together, Seven High-Severity Token-Scope and Auth Bypass Flaws
  Vypr Intelligence · Jun 17, 2026