CVE-2026-25714
MEDIUM
NVD
CVSS Score
4.3
Severity
MEDIUM
Published
Jul 03, 2026
Vendor
unknown
Description
Gitea versions up to and including 1.26.1 do not apply public-only token filtering consistently to the user organization API, leaving an incomplete fix for CVE-2025-68941.