Security Advisory

CVE-2026-25714

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-07-03 20:19:32

Last updated 2026-07-07 16:59:52

Assigner Gitea

CVSS score 4.3

State PUBLISHED

Description

Gitea versions up to and including 1.26.1 do not apply public-only token filtering consistently to the user organization API, leaving an incomplete fix for CVE-2025-68941.

← Browse all CVEs View on cve.org ↗