~ / search / GHSA-jhx5-4vr4-f327

GHSA-jhx5-4vr4-f327

Gitea inadvertently discloses users' login times by allowing (for example) the lastlogintime explore/users sort order

Source: GitHub Advisory Database (reviewed) Moderate CVE-2025-68943

Packages

EcosystemPackageAffectedFixed in
Go code.gitea.io/gitea < 1.21.8 1.21.8

Details

As written in the advisory (Markdown source, shown as plain text).

Gitea before 1.21.8 inadvertently discloses users' login times by allowing (for example) the lastlogintime explore/users sort order.

References

External links from the advisory. They lead to third-party sites.