Nixpkgs security tracker

Login with GitHub

⚠️ You are using a production deployment that is still only suitable for demo purposes. Any work done in this might be wiped later without notice.

Suggestion detail

Dismissed

(no matching packages found)

Permalink CVE-2026-25038

created 1 month, 3 weeks ago Activity log

Created & dismissed (no matching packages found) suggestion 1 month, 3 weeks ago

Gitea private organization labels are visible to unauthorized users

Gitea 1.26.2 allows unauthorized users to access labels of private organizations.

References

GitHub Security Advisory vendor-advisory
GitHub Pull Request #38151 patch
Gitea v1.26.3 Release release-notes
Gitea v1.26.4 Release Blog Post release-notes

Affected products

Gitea Open Source Git Server

==1.26.2