Patchwire CVEs, their patch status, and feeds to follow them

CVE-2026-58427

Fixed in a distro release EPSS <1%CVSS 7.5

Private org member list leaked via /members API endpoint — incomplete fix for PR #38145

Published 2026-08-13 · CVE record · OSV

Products: Gitea Open Source Git Server

Fixed upstream

EcosystemPackageFixed in
Gogitea.dev1.27.0

Distro releases

ReleasePackageFixed in
SUSE Linux Enterprise Server 16.0govulncheck-vulndb0.0.20260727T201416-160000.1.1
SUSE Linux Enterprise Server for SAP applications 16.0govulncheck-vulndb0.0.20260727T201416-160000.1.1
openSUSE Leap 16.0govulncheck-vulndb0.0.20260727T201416-160000.1.1