Auth bypass in Gitea Open Source Git Server

CVE-2026-58425

OAuth token introspection returns metadata of tokens issued to other clients (RFC 7662 section 4 violation)

Vulnerability class: Information Disclosure