Patchwire CVEs, their patch status, and feeds to follow them

CVE-2026-27660

Fixed in a distro release EPSS <1%CVSS 7.5

Gitea versions before 1.25.5 allow draft release data or attachments to be accessed without the required write permission.

Published 2026-07-03 · CVE record · OSV

Products: Gitea Open Source Git Server

Fixed upstream

EcosystemPackageFixed in
Gocode.gitea.io/gitea1.25.5

Distro releases

ReleasePackageFixed in
SUSE Linux Enterprise Server 16.0govulncheck-vulndb0.0.20260916T180043-160000.1.1
SUSE Linux Enterprise Server for SAP applications 16.0govulncheck-vulndb0.0.20260916T180043-160000.1.1
openSUSE Leap 16.0govulncheck-vulndb0.0.20260916T180043-160000.1.1
openSUSE Tumbleweedforgejo17.0.0-1.1
openSUSE Tumbleweedforgejo-longterm15.0.8-1.1