In Gitea before 1.22.5, branch deletion permissions are not adequately enforced after merging a pull request.
{ "severity": "Medium", "cpes": [ "cpe:2.3:a:gitea:gitea:*:*:*:*:*:-:*:*" ] }
"https://github.com/bitnami/vulndb/tree/main/data/gitea/BIT-gitea-2025-68940.json"