Vulnerability advisory
GO-2025-4261
Gitea allows attackers to add attachments with forbidden file extensions in code.gitea.io/gitea
Also known as BIT-gitea-2025-68939CVE-2025-68939GHSA-263q-5cv3-xq9g
Severity
Severity not reported.
Affected versions
| Affected | Fixed in |
|---|---|
| All versions | No fix listed |
Description
Gitea allows attackers to add attachments with forbidden file extensions in code.gitea.io/gitea