~ / search / GHSA-7xq4-mwcp-q8fx

GHSA-7xq4-mwcp-q8fx

Gitea: anonymous user can visit private user's project

Source: GitHub Advisory Database (reviewed) Moderate CVE-2025-68945

Packages

EcosystemPackageAffectedFixed in
Go code.gitea.io/gitea < 1.21.2 1.21.2

Details

As written in the advisory (Markdown source, shown as plain text).

In Gitea before 1.21.2, an anonymous user can visit a private user's project.

References

External links from the advisory. They lead to third-party sites.