https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 05 Nov 2026 20:32:44 +0000 https://db.gcve.eu/vuln/cve-2026-119441 <p><strong>Affected:</strong> Gitea</p> <p>`DELETE /api/v1/orgs/{org}/repos` deletes all repositories of an organization, but it did not enforce the public-only restriction of access tokens: the route only checked that the organization itself was public. A public-only token of an owner of a public organization could therefore permanently delete the organization&#39;s private repositories, which such a token must not reach. Routes that require organization ownership now reject public-only tokens.</p> <p><strong>Affected:</strong> Gitea</p> <p>`DELETE /api/v1/orgs/{org}/repos` deletes all repositories of an organization, but it did not enforce the public-only restriction of access tokens: the route only checked that the organization itself was public. A public-only token of an owner of a public organization could therefore permanently delete the organization&#39;s private repositories, which such a token must not reach. Routes that require organization ownership now reject public-only tokens.</p> https://db.gcve.eu/vuln/cve-2026-119441