MEDIUM 5.0 Go
Gitea sometimes mishandles propagation of token scope for access control within one of its own package registries
GHSA-f85h-c7m6-cfpm · BIT-gitea-2025-68944 · CVE-2025-68944 · GO-2025-4264
Published · Modified
Description
Gitea before 1.22.2 sometimes mishandles the propagation of token scope for access control within one of its own package registries.
Ready to move
Start Securing
Free, no credit card | First findings in minutes