MEDIUM 5.0 Go

Gitea sometimes mishandles propagation of token scope for access control within one of its own package registries

GHSA-f85h-c7m6-cfpm · BIT-gitea-2025-68944 · CVE-2025-68944 · GO-2025-4264

Published · Modified

Description

Gitea before 1.22.2 sometimes mishandles the propagation of token scope for access control within one of its own package registries.

Ready to move

Start Securing

Free, no credit card | First findings in minutes