Skip to content

Gitea: OIDC userinfo Endpoint Returns Identity Claims Without Enforcing API Token Scopes

Moderate severity GitHub Reviewed Published Jul 13, 2026 in go-gitea/gitea • Updated Jul 21, 2026

No open alerts for this advisory

Give feedback on Dependabot alerts