CsEnox

Gitea runner registration-token GET endpoint performs a write under a read-only token scope

Gitea email settings allow changing another user's primary email address

Gitea tracked-time deletion can target entries from another issue