CVE-2026-27771 [HIGH] – Gitea versions up to and including 1.26.1 have insufficient permission checks for Composer

Gitea versions up to and including 1.26.1 have insufficient permission checks for Composer package source links, which can expose private or internal package source information.