CVE-2025-68941

CVE-2025-68941 affects Gitea prior to 1.22.3, where an API token scoped to public resources could be used to access private resources. The issue arises from mishandling access controls, enabling unauthorized disclosure from private repositories or other sensitive data. Affected components include...

AZL-40517 CVE-2024-24788 affecting package golang for versions less than 1.22.3

A malformed DNS message in response to a query can cause the Lookup functions to get stuck in an infinite loop...