CVE-2025-69413

Name of the Vulnerable Software and Affected Versions Gitea versions prior to 1.25.2

Description Gitea versions before 1.25.2 are affected by an issue where the /api/v1/user endpoint provides differing responses for authentication failures based on the existence of a username. Specifically, the response varies depending on whether the provided username exists in the system.

Recommendations Update Gitea to version 1.25.2 or later.