In Gitea before 1.25.2, /api/v1/user has different responses for failed authentication depending on whether a username exists.
{ "severity": "Medium", "cpes": [ "cpe:2.3:a:gitea:gitea:*:*:*:*:*:-:*:*" ] }
"https://github.com/bitnami/vulndb/tree/main/data/gitea/BIT-gitea-2025-69413.json"