CVE-2026-25714

Gitea versions up to and including 1.26.1 do not apply public-only token filtering consistently to the user organization API, leaving an incomplete fix for CVE-2025-68941.

中CWE-862 すべてのCVE

脆弱性の種類

Gitea versions up to and including 1.26.1 do not apply public-only token filtering consistently to the user organization API, leaving an incomplete fix for CVE-2025-68941.

参考情報

https://blog.gitea.com/release-of-1.26.2/
https://github.com/go-gitea/gitea/pull/37118
https://github.com/go-gitea/gitea/releases/tag/v1.26.2
https://github.com/go-gitea/gitea/security/advisories/GHSA-8629-vc8r-5p58
https://github.com/go-gitea/gitea/security/advisories/GHSA-8629-vc8r-5p58

攻撃者より先に脆弱性を見つけましょう。

GitHubでサインインすれば、1分以内に最初の監査を実行できます。無料プランはクレジットカード不要です。

無料で監査を始める料金を見る