VYPR
Low severityOSV Advisory· Published Dec 26, 2025· Updated Dec 26, 2025

CVE-2025-68940

CVE-2025-68940

Description

In Gitea before 1.22.5, branch deletion permissions are not adequately enforced after merging a pull request.

Affected packages

Versions sourced from the GitHub Security Advisory.

PackageAffected versionsPatched versions
code.gitea.io/giteaGo
< 1.22.51.22.5

Affected products

1

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

6

News mentions

0

No linked articles in our index yet.