Gitea: Token public-only scope bypassed on Limited-visibility owners (Repository + Package categories) — residual after CVE-2026-25714 / PR #37118 in gitea.dev
{ "review_status": "UNREVIEWED", "url": "https://pkg.go.dev/vuln/GO-2026-6045" }
"https://vuln.go.dev/ID/GO-2026-6045.json"