~ / search / GHSA-h697-89cp-24q8

GHSA-h697-89cp-24q8

Gitea template repository generation follows unsafe filesystem paths

Source: GitHub Advisory Database (reviewed) Critical CVE-2026-25718

Packages

EcosystemPackageAffectedFixed in
Go code.gitea.io/gitea < 1.25.5 1.25.5

Details

As written in the advisory (Markdown source, shown as plain text).

Gitea versions before 1.25.5 mishandle path resolution during template repository generation, allowing template processing to read or write through symlinked or otherwise non-regular paths.

References

External links from the advisory. They lead to third-party sites.