{"id":"EUVD-2026-41603","enisaUuid":"df075ea5-738a-3b09-a8d5-cb62ed8189e1","description":"Notification API leaks private issue metadata after access revocation","datePublished":"Jul 3, 2026, 8:54:51 PM","dateUpdated":"Jul 6, 2026, 3:14:06 PM","baseScore":7.5,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","references":"https://github.com/go-gitea/gitea/security/advisories/GHSA-44qc-pgvp-wx7v\nhttps://github.com/go-gitea/gitea/pull/38108\nhttps://github.com/go-gitea/gitea/releases/tag/v1.26.4\nhttps://blog.gitea.com/release-of-1.26.3-and-1.26.4/\n","aliases":"CVE-2026-58419\nGHSA-44qc-pgvp-wx7v\n","assigner":"Gitea","epss":0.38,"enisaIdProduct":[{"id":"133277f2-675b-335c-b502-cfa2084a8ed7","product":{"name":"Gitea Open Source Git Server","vendor":{"name":"Gitea"}},"product_version":"1.26.2"}],"enisaIdVendor":[{"id":"8d0b617c-a37c-3ae4-a01c-58ce58ea0fb8","vendor":{"name":"Gitea"}}],"enisaIdVulnerability":[{"id":"730c4040-ba77-39a8-ab4f-241d8de00189","vulnerability":{"id":"CVE-2026-58419","description":"Notification API leaks private issue metadata after access revocation","datePublished":"Jul 3, 2026, 8:54:51 PM","dateUpdated":"Jul 6, 2026, 3:14:06 PM","status":"PUBLISHED","baseScore":7.5,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","references":"https://github.com/go-gitea/gitea/security/advisories/GHSA-44qc-pgvp-wx7v\nhttps://github.com/go-gitea/gitea/pull/38108\nhttps://github.com/go-gitea/gitea/releases/tag/v1.26.4\nhttps://blog.gitea.com/release-of-1.26.3-and-1.26.4/\n","enisa_id":"EUVD-2026-41603\n","assigner":"Gitea","epss":0.38,"dataProcessed":"Nov 5, 2026, 7:18:05 AM","vulnerabilityProduct":[{"id":"f6d43e8a-a9be-3b2e-a72c-8e29bfbf103c","product":{"name":"Gitea Open Source Git Server","vendor":{"name":"Gitea"}},"product_version":"1.26.2"}],"vulnerabilityVendor":[{"id":"b089ac9b-9777-3451-b63f-220b6e647b67","vendor":{"name":"Gitea"}}]}},{"id":"a09d2541-32b5-3795-9dec-d9980cbc7874","vulnerability":{"id":"GHSA-44qc-pgvp-wx7v","description":"Gitea: Notification API leaks private issue metadata after access revocation","datePublished":"Jul 21, 2026, 9:48:05 PM","dateUpdated":"Jul 21, 2026, 9:48:05 PM","baseScore":0.0,"references":"https://github.com/go-gitea/gitea/security/advisories/GHSA-44qc-pgvp-wx7v\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-58419\nhttps://github.com/go-gitea/gitea/pull/38108\nhttps://github.com/go-gitea/gitea/commit/9e84deb969aff5c1115c2984e41250f28c78451f\nhttps://blog.gitea.com/release-of-1.26.3-and-1.26.4\nhttps://github.com/go-gitea/gitea\nhttps://github.com/go-gitea/gitea/releases/tag/v1.26.4\n","enisa_id":"EUVD-2026-41603\n","aliases":"GHSA-44qc-pgvp-wx7v\nCVE-2026-58419\n","epss":0.0,"dataProcessed":"Nov 1, 2026, 2:03:08 AM","vulnerabilityProduct":[],"vulnerabilityVendor":[]}}],"enisaIdAdvisory":[]}