CVE-2026-28740 [HIGH] – Gitea versions up to and including 1.26.2 allow Git LFS object reuse to authorize private

Gitea versions up to and including 1.26.2 allow Git LFS object reuse to authorize private source objects for users who have repository access but lack Code-unit access.