Access Control Bypass

Overview Affected versions of this package are vulnerable to Access Control Bypass due to insufficient permission checks in the process for updating or rebasing pull request branches. An attacker can gain unauthorized access or modify protected branches by exploiting this weakness. Remediation...

GHSA-47RQ-XP99-92MX Gitea pull request branch permission checks allow unauthorized updates and rebases

Gitea versions before 1.25.5 have insufficient permission checks for updating or rebasing pull request branches...

Gitea pull request branch permission checks allow unauthorized updates and rebases

Gitea versions before 1.25.5 have insufficient permission checks for updating or rebasing pull request branches...

CVE-2026-24690: Improper Access Control

Gitea versions before 1.25.5 have insufficient permission checks for updating or rebasing pull request branches...

PT-2026-55591

Name of the Vulnerable Software and Affected Versions Gitea versions prior to 1.25.5 Description Insufficient permission checks exist when updating or rebasing pull request branches. Recommendations Update to version 1.25.5 or later...