—

GO-2026-6069

Gitea: GHSA-8fwc-qjw5-rvgp ClearRepoWatches fix not applied to API EditRepo path — sister code path retains stale watches on public->private in gitea.dev

Quick fix

GO-2026-6069 — gitea.dev: upgrade to the fixed version with the command below.

go get gitea.dev@v1.27.0

Details

Gitea: GHSA-8fwc-qjw5-rvgp ClearRepoWatches fix not applied to API EditRepo path — sister code path retains stale watches on public->private in gitea.dev

Are you affected?

Enter the version of the package you're using.

Affected packages

Go / gitea.dev

Introduced in: 0 Fixed in: 1.27.0

Fix go get gitea.dev@v1.27.0

References

https://github.com/go-gitea/gitea/security/advisories/GHSA-q423-49rw-g9mh [ADVISORY]
https://github.com/go-gitea/gitea/releases/tag/v1.27.0 [WEB]