—
GO-2026-6085
Gitea: Cross-repository IDOR in issue-dependency removal lets an attacker tamper with and comment on private repos they cannot access in gitea.dev
Quick fix
GO-2026-6085 — gitea.dev: upgrade to the fixed version with the command below.
go get gitea.dev@v1.27.0Details
Gitea: Cross-repository IDOR in issue-dependency removal lets an attacker tamper with and comment on private repos they cannot access in gitea.dev
Are you affected?
Enter the version of the package you're using.