https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-05T12:12:06.109430+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2026-27775 CVE-2026-27775 — Gitea pre-receive hook permission cache allows full repository write access 2026-10-05T12:12:07.951399+00:00

Affected: Gitea Open Source Git Server

Gitea 1.25.5 caches a branch-specific write-permission result across multiple refs in one pre-receive hook session, allowing a per-branch maintainer-edit grant to be reused for other refs and escalate to full repository write access.