{"id":"EUVD-2026-41625","enisaUuid":"245fbf00-12ea-36ba-94bf-d1ee39b61ada","description":"Gitea versions up to and including 1.25.4 allow redirect bypasses through raw or percent-encoded backslashes in redirect_to values.","datePublished":"Jul 3, 2026, 8:19:33 PM","dateUpdated":"Jul 7, 2026, 4:59:40 PM","baseScore":6.1,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","references":"https://github.com/go-gitea/gitea/security/advisories/GHSA-j5r2-4c8j-xc3m\nhttps://github.com/go-gitea/gitea/pull/36660\nhttps://github.com/go-gitea/gitea/pull/36716\nhttps://github.com/go-gitea/gitea/releases/tag/v1.25.5\nhttps://blog.gitea.com/release-of-1.25.5/\n","aliases":"CVE-2026-25779\nGHSA-j5r2-4c8j-xc3m\n","assigner":"Gitea","epss":0.3,"enisaIdProduct":[{"id":"ee69d0c5-cb8e-3a2e-9ca1-f290eee61929","product":{"name":"Gitea Open Source Git Server","vendor":{"name":"Gitea"}},"product_version":"0 ≤1.25.4"}],"enisaIdVendor":[{"id":"88ac7f0e-2947-3b8b-ac19-2a25f33012aa","vendor":{"name":"Gitea"}}],"enisaIdVulnerability":[{"id":"307d910a-c3e2-3fce-8dcf-f6ed2e9e6628","vulnerability":{"id":"CVE-2026-25779","description":"Gitea versions up to and including 1.25.4 allow redirect bypasses through raw or percent-encoded backslashes in redirect_to values.","datePublished":"Jul 3, 2026, 8:19:33 PM","dateUpdated":"Jul 7, 2026, 4:59:40 PM","status":"PUBLISHED","baseScore":6.1,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","references":"https://github.com/go-gitea/gitea/security/advisories/GHSA-j5r2-4c8j-xc3m\nhttps://github.com/go-gitea/gitea/pull/36660\nhttps://github.com/go-gitea/gitea/pull/36716\nhttps://github.com/go-gitea/gitea/releases/tag/v1.25.5\nhttps://blog.gitea.com/release-of-1.25.5/\n","enisa_id":"EUVD-2026-41625\n","assigner":"Gitea","epss":0.3,"dataProcessed":"Oct 27, 2026, 7:15:22 AM","vulnerabilityProduct":[{"id":"a567caba-6076-34ac-9a7b-89faef49f5b9","product":{"name":"Gitea Open Source Git Server","vendor":{"name":"Gitea"}},"product_version":"0 ≤1.25.4"}],"vulnerabilityVendor":[{"id":"21286968-74be-3fac-bdee-17ce7f90f995","vendor":{"name":"Gitea"}}]}},{"id":"96507781-5005-3601-945d-6989e3e63ca3","vulnerability":{"id":"GHSA-j5r2-4c8j-xc3m","description":"Gitea: Open Redirect via redirect_to","datePublished":"Jun 17, 2026, 6:10:46 PM","dateUpdated":"Jun 17, 2026, 6:10:46 PM","baseScore":0.0,"references":"https://github.com/go-gitea/gitea/security/advisories/GHSA-j5r2-4c8j-xc3m\nhttps://github.com/go-gitea/gitea\n","enisa_id":"EUVD-2026-41625\n","aliases":"CVE-2026-25779\nGHSA-j5r2-4c8j-xc3m\n","epss":0.0,"dataProcessed":"Oct 25, 2026, 1:57:08 AM","vulnerabilityProduct":[],"vulnerabilityVendor":[]}}],"enisaIdAdvisory":[]}