{"id":"EUVD-2026-41641","enisaUuid":"660fac22-5fe5-3f56-8831-78a4d1e371b6","description":"Gitea versions before 1.25.5 use release tag names and asset names as filesystem path components when dumping release assets, allowing specially crafted names to affect dump output paths.","datePublished":"Jul 3, 2026, 8:19:39 PM","dateUpdated":"Jul 7, 2026, 4:58:39 PM","baseScore":5.3,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","references":"https://github.com/go-gitea/gitea/pull/36799\nhttps://github.com/go-gitea/gitea/pull/36839\nhttps://github.com/go-gitea/gitea/releases/tag/v1.25.5\nhttps://blog.gitea.com/release-of-1.25.5/\n","aliases":"CVE-2026-28705\nGHSA-7jvx-g65v-r899\n","assigner":"Gitea","epss":0.45,"enisaIdProduct":[{"id":"bd68605b-f0fc-3f1e-ba4b-a65924e01916","product":{"name":"Gitea Open Source Git Server","vendor":{"name":"Gitea"}},"product_version":"0 \u003c1.25.5"}],"enisaIdVendor":[{"id":"0a4f3e6e-def9-3469-9020-a3f0e61bec65","vendor":{"name":"Gitea"}}],"enisaIdVulnerability":[{"id":"1654a7af-5233-3a1d-922e-5885d37a36e2","vulnerability":{"id":"CVE-2026-28705","description":"Gitea versions before 1.25.5 use release tag names and asset names as filesystem path components when dumping release assets, allowing specially crafted names to affect dump output paths.","datePublished":"Jul 3, 2026, 8:19:39 PM","dateUpdated":"Jul 7, 2026, 4:58:39 PM","status":"PUBLISHED","baseScore":5.3,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","references":"https://github.com/go-gitea/gitea/pull/36799\nhttps://github.com/go-gitea/gitea/pull/36839\nhttps://github.com/go-gitea/gitea/releases/tag/v1.25.5\nhttps://blog.gitea.com/release-of-1.25.5/\n","enisa_id":"EUVD-2026-41641\n","assigner":"Gitea","epss":0.45,"dataProcessed":"Oct 27, 2026, 7:20:28 AM","vulnerabilityProduct":[{"id":"68397f07-e454-3dd7-a1ee-47302ef49727","product":{"name":"Gitea Open Source Git Server","vendor":{"name":"Gitea"}},"product_version":"0 \u003c1.25.5"}],"vulnerabilityVendor":[{"id":"56e55524-732a-3962-8eaa-fb04522f7e17","vendor":{"name":"Gitea"}}]}},{"id":"9afe407e-638c-3696-ab09-8cfb3f772c95","vulnerability":{"id":"GHSA-7jvx-g65v-r899","description":"Gitea release asset dumps permit path traversal through crafted names","datePublished":"Jul 3, 2026, 9:31:38 PM","dateUpdated":"Sep 1, 2026, 5:23:36 PM","baseScore":0.0,"references":"https://nvd.nist.gov/vuln/detail/CVE-2026-28705\nhttps://github.com/go-gitea/gitea/pull/36799\nhttps://github.com/go-gitea/gitea/pull/36839\nhttps://github.com/go-gitea/gitea/commit/833304ac15bce17d0f03c4852af5f60c186f6a70\nhttps://github.com/go-gitea/gitea/commit/f7ac5076711af3a260f3f98b2c1f8c19b32f6d09\nhttps://blog.gitea.com/release-of-1.25.5\nhttps://github.com/go-gitea/gitea\nhttps://github.com/go-gitea/gitea/releases/tag/v1.25.5\n","enisa_id":"EUVD-2026-41641\n","aliases":"GHSA-7jvx-g65v-r899\nCVE-2026-28705\n","epss":0.0,"dataProcessed":"Oct 25, 2026, 1:57:47 AM","vulnerabilityProduct":[],"vulnerabilityVendor":[]}}],"enisaIdAdvisory":[]}