PT-2026-65376 · Go · Gitea.Dev

Publicado 2026-07-27 · Atualizado 2026-07-27

OSV

Gitea: OAuth token introspection returns metadata of tokens issued to other clients (RFC 7662 section 4 violation) in gitea.dev

Identificadores relacionados

GO-2026-6079

Produtos afetados

Gitea.Dev

Referências · 5

• https://github.com/go-gitea/gitea/security/advisories/GHSA-vxv2-8j6r-pcpg · Nota
• https://github.com/go-gitea/gitea/pull/38042 · Nota
• https://github.com/go-gitea/gitea/commit/c9920b7bd0f6ec1f7590f104711b09d55917f9e8 · Nota
• https://github.com/go-gitea/gitea/releases/tag/v1.27.0 · Nota
• https://osv.dev/vulnerability/GO-2026-6079 · Aviso do Fabricante