Security Advisory

CVE-2026-26232

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-07-03 20:19:34
Last updated 2026-07-07 16:59:23
Assigner Gitea
CVSS score not scored
State PUBLISHED

Description

Gitea versions before 1.25.5 do not consistently enforce OAuth2 authorization code expiry and single-use behavior during token exchange.

← Browse all CVEs View on cve.org ↗