PT-2026-55653 · Unknown · Notification Api

Ybsun0215 · Published 2026-07-03 · Updated 2026-07-03 · CVE-2026-58419

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions Notification API (affected versions not specified)

Description The Notification API leaks private issue metadata after access has been revoked.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2026-58419

Affected Products

Notification Api

References · 6

• https://github.com/go-gitea/gitea/pull/38108 · Patch
• https://github.com/go-gitea/gitea/security/advisories/GHSA-44qc-pgvp-wx7v · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-58419 · Security Note
• https://github.com/go-gitea/gitea/releases/tag/v1.26.4 · Note
• https://twitter.com/CVEnew/status/2073191224480039414 · Twitter Post
• https://blog.gitea.com/release-of-1.26.3-and-1.26.4 · Note