HIGH7.5
GHSA-47rq-xp99-92mx
Gitea pull request branch permission checks allow unauthorized updates and rebases
Quick fix
GHSA-47rq-xp99-92mx — code.gitea.io/gitea: upgrade to the fixed version with the command below.
go get code.gitea.io/gitea@v1.25.5Details
Gitea versions before 1.25.5 have insufficient permission checks for updating or rebasing pull request branches.
Are you affected?
Enter the version of the package you're using.
Affected packages
References
- https://nvd.nist.gov/vuln/detail/CVE-2026-24690[ADVISORY]
- https://github.com/go-gitea/gitea/pull/36465[WEB]
- https://github.com/go-gitea/gitea/pull/36838[WEB]
- https://github.com/go-gitea/gitea/commit/76c539cd572f1638c5a8a6571b0c347b277bf999[WEB]
- https://github.com/go-gitea/gitea/commit/99b0bf7324dec2f9b85ce33ff809d0cc2acd5864[WEB]
- https://blog.gitea.com/release-of-1.25.5[WEB]
- https://github.com/go-gitea/gitea[PACKAGE]
- https://github.com/go-gitea/gitea/releases/tag/v1.25.5[WEB]