← All advisories

Critical severity9.6NVD Advisory· Published Aug 13, 2026· Updated Aug 26, 2026

CVE-2026-56443

CVE-2026-56443

Description

Token public-only scope bypassed on Limited-visibility owners (Repository + Package categories) — residual after CVE-2026-25714 / PR #37118

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
code.gitea.io/giteaGo	< 1.27.0	1.27.0

Affected products

2

Go Gitea/Giteallm-fuzzy
osv-coords
pkg:rpm/opensuse/govulncheck-vulndb&distro=openSUSE%20Leap%2016.0
Range: < 0.0.20260723T184607-160000.1.1

Patches

Vulnerability mechanics

References

4

News mentions

0

No linked articles in our index yet.