{"id":"EUVD-2026-41616","enisaUuid":"6a66bea5-d29e-3ac7-aeda-9f4e7ef789a6","description":"Gitea versions before 1.25.5 lack validation constraints for repository creation fields, including length-limited template fields and trust model or object format values.","datePublished":"Jul 3, 2026, 8:19:30 PM","dateUpdated":"Jul 7, 2026, 5:00:34 PM","baseScore":9.1,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","references":"https://github.com/go-gitea/gitea/pull/36671\nhttps://github.com/go-gitea/gitea/pull/36757\nhttps://github.com/go-gitea/gitea/releases/tag/v1.25.5\nhttps://blog.gitea.com/release-of-1.25.5/\n","aliases":"CVE-2026-22547\nGHSA-922f-hfwp-p56f\n","assigner":"Gitea","epss":0.52,"enisaIdProduct":[{"id":"d39500f4-8a48-3d45-bc3a-5e4c741dd440","product":{"name":"Gitea Open Source Git Server","vendor":{"name":"Gitea"}},"product_version":"0 \u003c1.25.5"}],"enisaIdVendor":[{"id":"c5be849e-1179-3807-aad3-16abbf244e0a","vendor":{"name":"Gitea"}}],"enisaIdVulnerability":[{"id":"49e6f9e2-2e1a-3f5c-93c3-ed6c52450094","vulnerability":{"id":"CVE-2026-22547","description":"Gitea versions before 1.25.5 lack validation constraints for repository creation fields, including length-limited template fields and trust model or object format values.","datePublished":"Jul 3, 2026, 8:19:30 PM","dateUpdated":"Jul 7, 2026, 5:00:34 PM","status":"PUBLISHED","baseScore":9.1,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","references":"https://github.com/go-gitea/gitea/pull/36671\nhttps://github.com/go-gitea/gitea/pull/36757\nhttps://github.com/go-gitea/gitea/releases/tag/v1.25.5\nhttps://blog.gitea.com/release-of-1.25.5/\n","enisa_id":"EUVD-2026-41616\n","assigner":"Gitea","epss":0.52,"dataProcessed":"Nov 7, 2026, 7:23:30 AM","vulnerabilityProduct":[{"id":"167f5330-bf69-351a-8e75-eef4465cb502","product":{"name":"Gitea Open Source Git Server","vendor":{"name":"Gitea"}},"product_version":"0 \u003c1.25.5"}],"vulnerabilityVendor":[{"id":"90eae0df-56a7-3eba-a327-9afbf0f18cdb","vendor":{"name":"Gitea"}}]}},{"id":"bb02dd34-31a6-3f57-acca-d6eaa2253f36","vulnerability":{"id":"GHSA-922f-hfwp-p56f","description":"Gitea repository creation accepts insufficiently validated fields","datePublished":"Jul 3, 2026, 9:31:37 PM","dateUpdated":"Sep 1, 2026, 5:19:09 PM","baseScore":0.0,"references":"https://nvd.nist.gov/vuln/detail/CVE-2026-22547\nhttps://github.com/go-gitea/gitea/pull/36671\nhttps://github.com/go-gitea/gitea/pull/36757\nhttps://github.com/go-gitea/gitea/commit/569c49debe06f30a2bbb50b3812e705c556b8adf\nhttps://github.com/go-gitea/gitea/commit/b3bc79262d106f4259f82a26609e4738b618152b\nhttps://blog.gitea.com/release-of-1.25.5\nhttps://github.com/go-gitea/gitea\nhttps://github.com/go-gitea/gitea/releases/tag/v1.25.5\n","enisa_id":"EUVD-2026-41616\n","aliases":"CVE-2026-22547\nGHSA-922f-hfwp-p56f\n","epss":0.0,"dataProcessed":"Nov 1, 2026, 2:02:28 AM","vulnerabilityProduct":[],"vulnerabilityVendor":[]}}],"enisaIdAdvisory":[]}