Security Advisory
CVE-2026-25714
4.3
MEDIUM
Vulnerability Description
Gitea versions up to and including 1.26.1 do not apply public-only token filtering consistently to the user organization API, leaving an incomplete fix for CVE-2025-68941.
Published Date
July 3, 2026
Official Source
NIST NVD Advisory