Go/code.gitea.io/gitea CVE-2025-68939: high 8.2, EPSS 0.33%
Gitea allows attackers to add attachments with forbidden file extensions
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | - |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-263q-5cv3-xq9g
- https://nvd.nist.gov/vuln/detail/CVE-2025-68939
- https://github.com/go-gitea/gitea/pull/32151
- https://blog.gitea.com/release-of-1.23.0
- https://github.com/go-gitea/gitea
- https://github.com/go-gitea/gitea/releases/tag/v1.23.0
CVE-2025-68939 · published · modified · JSON