CVE-2026-127958 | Gitea up to 28.3.x Pull Request Review information disclosure

A vulnerability was found in Gitea up to 28.3.x. It has been declared as problematic. Affected by this issue is some unknown functionality of the component Pull Request Review. Executing a manipulation can lead to information disclosure.

This vulnerability appears as CVE-2026-127958. The attack may be performed from remote. There is no available exploit.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More