high7.5
CVE-2026-25712
Gitea versions before 1.25.5 have insufficient visibility checks in organization permission APIs for hidden members and private organizations.
Impact
Gitea versions before 1.25.5 have insufficient visibility checks in organization permission APIs for hidden members and private organizations.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| go | code.gitea.io/gitea | < 1.25.5 | 1.25.5 |
Weakness classification
References
- NVD record
- CVE.org record
- GitHub advisory
- https://github.com/advisories/GHSA-37w2-86g3-h4qh
- https://nvd.nist.gov/vuln/detail/CVE-2026-25712
- https://github.com/go-gitea/gitea/pull/36798
- https://github.com/go-gitea/gitea/pull/36841
- https://blog.gitea.com/release-of-1.25.5
- https://github.com/go-gitea/gitea/releases/tag/v1.25.5
- https://github.com/go-gitea/gitea/commit/57b5ed3f252753797e790c060c42fbbe8219b9c1
- https://github.com/go-gitea/gitea/commit/96515c0f200d37228dc84a599c6177297a230c94
- https://blog.gitea.com/release-of-1.25.5/