Go/code.gitea.io/gitea CVE-2025-68939: medium 5.3, EPSS 0.33%
Gitea allows attackers to add attachments with forbidden file extensions in code.gitea.io/gitea
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | - |
Fixed versions
No fixed version in the source.
Sources
- osv: GO-2025-4261
- nvd: CVE-2025-68939
- https://github.com/advisories/GHSA-263q-5cv3-xq9g
- https://blog.gitea.com/release-of-1.23.0
- https://github.com/go-gitea/gitea/pull/32151
- https://github.com/go-gitea/gitea/releases/tag/v1.23.0
CVE-2025-68939 · published · modified · JSON