Security Advisory

CVE-2026-20909

5.3
MEDIUM

Vulnerability Description

Gitea versions before 1.25.5 have insufficient permission checks when listing tracked time entries.
Published Date July 3, 2026
Official Source NIST NVD Advisory