VDB

CVE-2025-68940

CVE-2025-68940 PUBLISHED

In Gitea before 1.22.5, branch deletion permissions are not adequately enforced after merging a pull request.

EPSS 0.01% · 1.2th percentile

Risk Scores

EPSS Score
0.01%
1.2th percentile

Affected Products

VendorProductVersions
Bitnamigitea0, 0
Bitnamigitea0

Timeline

  • Dec 26, 2025 CVE Published
  • Dec 26, 2025 EPSS Score
  • Dec 26, 2025 PoC Published
  • Dec 29, 2025 EPSS Score
  • Jan 2, 2026 EPSS Score
  • Jan 5, 2026 EPSS Score
  • Jan 9, 2026 EPSS Score
  • Jan 12, 2026 EPSS Score
  • Jan 16, 2026 EPSS Score
  • Jan 19, 2026 EPSS Score
  • Jan 23, 2026 EPSS Score
  • Jan 26, 2026 EPSS Score
Open in Interactive Console →
$ Console Community · 100/wk Open console ›