PT-2025-53442 · Gitea · Gitea

Published 2025-12-26 · Updated 2026-01-06 · CVE-2025-68944

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions Gitea versions prior to 1.22.2

Description A flaw exists in Gitea where the propagation of token scope for access control is improperly handled within its package registries. This can lead to unauthorized access.

Recommendations Update to Gitea version 1.22.2 or later.

Fix

Weakness Enumeration

CWE-441

Related Identifiers

BIT-GITEA-2025-68944

CVE-2025-68944

GHSA-F85H-C7M6-CFPM

GO-2025-4264

SUSE-SU-2026:0037-1

Affected Products

Gitea

References · 89

• https://nvd.nist.gov/vuln/detail/CVE-2025-68944 · Security Note
• https://osv.dev/vulnerability/CVE-2025-68944 · Vendor Advisory
• https://osv.dev/vulnerability/GO-2025-4264 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2026:0037-1 · Vendor Advisory
• https://github.com/go-gitea/gitea/releases/tag/v1.22.2 · Note
• https://github.com/go-gitea/gitea/pull/31967 · Note
• https://suse.com/security/cve/CVE-2025-68941 · Note
• https://suse.com/security/cve/CVE-2025-67508 · Note
• https://suse.com/security/cve/CVE-2025-10543 · Note
• https://suse.com/security/cve/CVE-2025-60633 · Note
• https://suse.com/security/cve/CVE-2025-68939 · Note
• https://suse.com/security/cve/CVE-2025-65637 · Note
• https://suse.com/security/cve/CVE-2025-66508 · Note
• https://suse.com/security/cve/CVE-2025-64702 · Note
• https://suse.com/security/cve/CVE-2025-64708 · Note