CVE-2026-25712: Improper Access Control

Gitea versions before 1.25.5 have insufficient visibility checks in organization permission APIs for hidden members and private organizations...