← All advisories

High severity7.5NVD Advisory· Published Jul 3, 2026· Updated Jul 7, 2026

CVE-2026-25712

CVE-2026-25712

Description

Gitea versions before 1.25.5 have insufficient visibility checks in organization permission APIs for hidden members and private organizations.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
code.gitea.io/giteaGo	< 1.25.5	1.25.5

Affected products

2

osv-coords
pkg:rpm/opensuse/govulncheck-vulndb&distro=openSUSE%20Leap%2016.0
Range: < 0.0.20260902T191204-160000.1.1
Go Gitea/Giteallm-fuzzy
Range: <1.25.5

Patches

Vulnerability mechanics

References

9

github.com/advisories/GHSA-37w2-86g3-h4qhghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2026-25712ghsaADVISORY
blog.gitea.com/release-of-1.25.5ghsaWEB
github.com/go-gitea/gitea/commit/57b5ed3f252753797e790c060c42fbbe8219b9c1ghsaWEB
github.com/go-gitea/gitea/commit/96515c0f200d37228dc84a599c6177297a230c94ghsaWEB
github.com/go-gitea/gitea/pull/36798nvdWEB
github.com/go-gitea/gitea/pull/36841nvdWEB
github.com/go-gitea/gitea/releases/tag/v1.25.5nvdWEB
blog.gitea.com/release-of-1.25.5/nvd

News mentions

0

No linked articles in our index yet.