Vulnerability advisory
GO-2025-4267
Gitea doesn't adequately enforce branch deletion permissions after merging a pull request. in code.gitea.io/gitea
Also known as BIT-gitea-2025-68940CVE-2025-68940GHSA-rrcw-5rjv-vj26
Severity
Severity not reported.
Affected versions
| Affected | Fixed in |
|---|---|
| All versions before 1.22.5 | 1.22.5 |
Description
Gitea doesn't adequately enforce branch deletion permissions after merging a pull request. in code.gitea.io/gitea