EUVD-2025-205411

Gitea before 1.23.0 allows attackers to add attachments with forbidden file extensions by editing an attachment name via an attachment API...

CVE-2025-68938

Gitea before 1.25.2 mishandles authorization for deletion of releases...

CVE-2025-68938

Gitea before 1.25.2 mishandles authorization for deletion of releases...

CVE-2025-68938

CVE-2025-68938 affects Gitea prior to 1.25.2, where the authorization for deleting releases is mishandled. The issue enables an attacker with minimal privileges to delete project releases, potentially leading to loss of assets and distribution history. Public references indicate the fix is in Git...

EUVD-2025-205406

Gitea before 1.25.2 mishandles authorization for deletion of releases...

CVE-2025-68938

Gitea before 1.25.2 mishandles authorization for deletion of releases...

CVE-2025-68938

Gitea before 1.25.2 mishandles authorization for deletion of releases...

Gitea 安全漏洞

Gitea is a lightweight Go-based git service developed by the Gitea community. A security vulnerability exists in Gitea versions prior to 1.21.8, which stems from allowing user login times to be exposed via lastlogintime sorting...

CVE-2025-68941

Gitea before 1.22.3 mishandles access to a private resource upon receiving an API token with scope limited to public resources...

Gitea 安全漏洞

Gitea is a lightweight Go-based git service developed by the Gitea community. A security vulnerability exists in Gitea versions prior to 1.22.5, which stems from insufficient execution of branch delete permissions after a merge pull request...

Gitea 安全漏洞

Gitea is a lightweight Go-based git service developed by the Gitea community. A security vulnerability exists in Gitea versions prior to 1.22.2 that stems from improper handling of token scope propagation...

PT-2025-53442

Name of the Vulnerable Software and Affected Versions Gitea versions prior to 1.22.2 Description A flaw exists in Gitea where the propagation of token scope for access control is improperly handled within its package registries. This can lead to unauthorized access. Recommendations Update to Gite...

CVE-2025-68939

Gitea before 1.23.0 allows attackers to add attachments with forbidden file extensions by editing an attachment name via an attachment API...

CVE-2025-68940

In Gitea before 1.22.5, branch deletion permissions are not adequately enforced after merging a pull request...

CVE-2025-68944

Gitea before 1.22.2 sometimes mishandles the propagation of token scope for access control within one of its own package registries...

Gitea 安全漏洞

Gitea is a lightweight Go-based git service developed by the Gitea community. A security vulnerability exists in Gitea versions prior to 1.21.2, which stems from an anonymous user being able to access private user projects...

Gitea 安全漏洞

Gitea is a lightweight Go-based git service developed by the Gitea community. A security vulnerability exists in Gitea versions prior to 1.22.3, which stems from improper handling of access to private resources when receiving API tokens whose scope is limited to public resources...

PT-2025-53437

Name of the Vulnerable Software and Affected Versions Gitea versions prior to 1.22.5 Description A permission enforcement issue exists in Gitea related to branch deletion after a pull request merge. Specifically, the system does not adequately enforce branch deletion permissions in these scenario...

CVE-2025-68938

Gitea before 1.25.2 mishandles authorization for deletion of releases...

Gitea 安全漏洞

Gitea is a lightweight Go-based git service developed by the Gitea community. A security vulnerability exists in Gitea versions prior to 1.22.2, which stems from the use of v-html instead of v-text in the search input box, which could lead to a cross-site scripting attack...