alpine · CVE-2025-68940

Quick triage

View at Official alpine advisory, NVD, CVE.org · CVE detail

Freshness: no update timestamp found; verify against the upstream OS advisory manually.

Tracker summary

CVE-2025-68940: 1 source package rows (gitea); 28 state rows across 2 repos (3.22-community, edge-community); fixed 0, open 28.

Description:

In Gitea before 1.22.5, branch deletion permissions are not adequately enforced after merging a pull request.