Vulnerability advisory
BIT-gitea-2025-68941
Also known as CVE-2025-68941GHSA-xfq3-qj7j-4565GO-2025-4268
Severity
Severity not reported.
Affected versions
gitea Bitnami
| Affected | Fixed in |
|---|---|
| All versions before 1.22.3 | 1.22.3 |
Severity for this package
| |
Description
Gitea before 1.22.3 mishandles access to a private resource upon receiving an API token with scope limited to public resources.