{"uuid": "545177b0-ff34-4ffc-a38e-0f389230373b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58443", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mr6ptacohx2v", "content": "CVE-2026-58443 - gitea\nA public-only token for a public repository can update a private pull request branch. This can happen because Gitea checks the token's restrictions against the public base repository, not\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#gitea #Golang #CVE #infosec", "creation_timestamp": "2026-07-21T21:10:05.639472Z"}