漏洞信息
# 通知API在撤销协作者权限后泄露私有仓库标题
N/A
神龙判断
是否为 Web 类漏洞： 未知
判断理由：
N/A
提示
尽管我们采用了先进的大模型技术，但其输出仍可能包含不准确或过时的信息。
神龙会尽力确保数据准确，但也请结合实际情况进行甄别与判断。
神龙祝您一切顺利！
漏洞标题
Notification API Leaks Private Repository Issue Titles After Collaborator Permission Revocation
漏洞描述信息
Gitea's notification API does not re-validate repository access permissions when returning notification details. After a user's access to a private repository is revoked, they may still view issue and pull request titles through previously received notifications.
CVSS信息
N/A
漏洞类别
信息暴露