CVE-2026-73135

Name of the Vulnerable Software and Affected Versions Gitea (affected versions not specified)

Description Inconsistent repository visibility predicates in certain repository-listing endpoints allow the disclosure of repository metadata. This occurs even when the repository owners are hidden from the viewer, bypassing the intended owner-visibility boundary. While direct routes correctly return a 404 response to deny access, these listing endpoints expose the existence and metadata of the repositories.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.