Vulnerability advisory
GO-2025-4264
Gitea sometimes mishandles propagation of token scope for access control within one of its own package registries in code.gitea.io/gitea
Also known as BIT-gitea-2025-68944CVE-2025-68944GHSA-f85h-c7m6-cfpm
Severity
Severity not reported.
Affected versions
| Affected | Fixed in |
|---|---|
| All versions before 1.22.2 | 1.22.2 |
Description
Gitea sometimes mishandles propagation of token scope for access control within one of its own package registries in code.gitea.io/gitea