Gitea - Gitea Open Source Git Server - CRITICAL - CVE-2026-58426. A vulnerability exists in Gitea Actions Artifacts (V4) where ambiguous handling of signed URLs for HMAC can lead to unauthorized access across repositories and potentially allow for inappropriate state manipulation during task uploads. This may allow an attacker to read artifacts from another repository or alter the upload state of tasks compounding security risks. Users are advised to update to the latest version to mitigate these risks.