Gitea tracked-time deletion can target entries from another issue (CVE-2026-25782) | HOL Guard CVE