CVE-2026-68957

Name of the Vulnerable Software and Affected Versions Gitea (affected versions not specified)

Description The API and web issue-search paths fail to treat restricted accounts as anonymous viewers when evaluating Limited-visibility repository owners. This allows a restricted user to search for and retrieve issue titles and bodies that should be hidden according to the owner's visibility policy. Additionally, keyword matching can reveal whether hidden issue content or comments contain a specific supplied term.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.