---
title: "Discussion on \"One Route The Patch Forgot\" | Hashnode"
description: "Discussion on \"One Route The Patch Forgot\". How I used Codex to find CVE-2026-58444 in Gitea\nA token-scope enforcement bypass on GET /{owner}/{repo} GHSA-cp3q-vrj2-ghhh\nI. Introduction\nGitea is an open-source, self-hostable Git service the \"Git"
url: "https://hashnode.com/posts/one-route-the-patch-forgot/6aa370c098604bf6383b2116"
---

[Feed](https://hashnode.com/feed) /

Discussion

# [One Route The Patch Forgot](https://blogs.night-wolf.io/one-route-the-patch-forgot?utm_source=hashnode&utm_medium=feed)

How I used Codex to find CVE-2026-58444 in Gitea A token-scope enforcement bypass on GET /{owner}/{repo} GHSA-cp3q-vrj2-ghhh I. Introduction Gitea is an open-source, self-hostable Git service the "Git

Sep 11 · 13 min read · blogs.night-wolf.io  
Read the article

-   [#gitea](https://hashnode.com/tag/gitea)

## Written by

[Vũ Phúc Thành](https://hashnode.com/@ThanhVP3)

@ThanhVP3

  
[View profile](https://hashnode.com/@ThanhVP3)

Jumping On It

## Responses

Markdown supported · ⌘↵ to post

No responses yet.