CVE-2026-114199 | Gitea up to 28.2.x Contribution Heatmap heatmap access control

November 1, 2026 Yanac

A vulnerability, which was classified as problematic, was found in Gitea up to 28.2.x. The impacted element is an unknown function of the file /api/v1/users/{username}/heatmap of the component Contribution Heatmap. Executing a manipulation can lead to improper access controls.

The identification of this vulnerability is CVE-2026-114199. The attack may be launched remotely. There is no exploit available.

You should upgrade the affected component.VulDB Recent EntriesRead More