{"id":"EUVD-2026-41624","enisaUuid":"1dca42b6-3a2a-3d80-b72d-ea1b5be8bca1","description":"Gitea versions before 1.25.5 mishandle path resolution during template repository generation, allowing template processing to read or write through symlinked or otherwise non-regular paths.","datePublished":"Jul 3, 2026, 8:19:33 PM","dateUpdated":"Jul 7, 2026, 4:59:46 PM","baseScore":9.1,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","references":"https://github.com/go-gitea/gitea/pull/36734\nhttps://github.com/go-gitea/gitea/pull/36746\nhttps://github.com/go-gitea/gitea/releases/tag/v1.25.5\nhttps://blog.gitea.com/release-of-1.25.5/\n","aliases":"CVE-2026-25718\nGHSA-h697-89cp-24q8\n","assigner":"Gitea","epss":0.56,"enisaIdProduct":[{"id":"de3fe5a9-68e3-3e6d-8274-37f015941275","product":{"name":"Gitea Open Source Git Server","vendor":{"name":"Gitea"}},"product_version":"0 \u003c1.25.5"}],"enisaIdVendor":[{"id":"e8224b19-a273-3c10-8c00-8b2d6a47294c","vendor":{"name":"Gitea"}}],"enisaIdVulnerability":[{"id":"0cfe88d5-b75e-347e-9c74-65b8b7b99ded","vulnerability":{"id":"GHSA-h697-89cp-24q8","description":"Gitea template repository generation follows unsafe filesystem paths","datePublished":"Jul 3, 2026, 9:31:37 PM","dateUpdated":"Sep 1, 2026, 5:19:34 PM","baseScore":0.0,"references":"https://nvd.nist.gov/vuln/detail/CVE-2026-25718\nhttps://github.com/go-gitea/gitea/pull/36734\nhttps://github.com/go-gitea/gitea/pull/36746\nhttps://github.com/go-gitea/gitea/commit/2176e84ab977011ff2bc3f3a9066020cc674f6b1\nhttps://github.com/go-gitea/gitea/commit/579615936c1ef7ba16c8887b9d12ade4c44f78fa\nhttps://blog.gitea.com/release-of-1.25.5\nhttps://github.com/go-gitea/gitea\nhttps://github.com/go-gitea/gitea/releases/tag/v1.25.5\n","enisa_id":"EUVD-2026-41624\n","aliases":"GHSA-h697-89cp-24q8\nCVE-2026-25718\n","epss":0.0,"dataProcessed":"Nov 1, 2026, 2:02:28 AM","vulnerabilityProduct":[],"vulnerabilityVendor":[]}},{"id":"22bb15e1-2475-360f-b119-92e3416cbf8f","vulnerability":{"id":"CVE-2026-25718","description":"Gitea versions before 1.25.5 mishandle path resolution during template repository generation, allowing template processing to read or write through symlinked or otherwise non-regular paths.","datePublished":"Jul 3, 2026, 8:19:33 PM","dateUpdated":"Jul 7, 2026, 4:59:46 PM","status":"PUBLISHED","baseScore":9.1,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","references":"https://github.com/go-gitea/gitea/pull/36734\nhttps://github.com/go-gitea/gitea/pull/36746\nhttps://github.com/go-gitea/gitea/releases/tag/v1.25.5\nhttps://blog.gitea.com/release-of-1.25.5/\n","enisa_id":"EUVD-2026-41624\n","assigner":"Gitea","epss":0.56,"dataProcessed":"Nov 7, 2026, 7:18:50 AM","vulnerabilityProduct":[{"id":"926893b6-7020-3f3e-a3ad-52162276dc33","product":{"name":"Gitea Open Source Git Server","vendor":{"name":"Gitea"}},"product_version":"0 \u003c1.25.5"}],"vulnerabilityVendor":[{"id":"e568614b-7b32-3945-ae57-a77cd3f15755","vendor":{"name":"Gitea"}}]}}],"enisaIdAdvisory":[]}