PT-2025-53442
CVE-2025-68944
·
Published
2025-12-26
·
Updated
2026-10-13
Description by
CVSS 3.1
5.3
MediumMetricsAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Name of the Vulnerable Software and Affected Versions
Gitea versions prior to 1.22.2
Description
A flaw exists in Gitea where the propagation of token scope for access control is improperly handled within its package registries. This can lead to unauthorized access.
Recommendations
Update to Gitea version 1.22.2 or later.
Found an issue in the description? Have something to add? Feel free to write us 👾