Auth bypass in Gitea Open Source Git Server

CVE-2026-50105

RSS/Atom feed handlers bypass API-token scope & public-only confinement (incomplete fix of #37698)

Vulnerability class: Information Disclosure