Start for Free
LOW 3.1 Go

Gitea doesn't adequately enforce branch deletion permissions after merging a pull request.

GHSA-rrcw-5rjv-vj26 · BIT-gitea-2025-68940 · CVE-2025-68940 · GO-2025-4267

Published · Modified

Description

In Gitea before 1.22.5, branch deletion permissions are not adequately enforced after merging a pull request.

References

Ready to move

Start Securing

Start for Free Get Demo

Free, no credit card | First findings in minutes