EUVD-2026-41636Published

Gitea 1.25.5 caches a branch-specific write-permission result across multiple refs in one pre-receive hook session, allowing a per-branch maintainer-edit grant to be reused for other refs and escalate to full repository write access.

Exact source revision recorded 30 Oct 2026 03:53:31 UTC. It does not establish the source's current position. Latest evidence.

Recorded JSON

Immutable source observations

2 recorded revisions

Each citation identifies one complete source statement. Source modification dates and the time this installation observed them are distinct. Latest history includes records historically associated by source identifiers; a removed alias is not a current equivalence claim. Exact citations show that source record's own earlier observations. Failed reads and unchanged polls do not rewrite history.

30 Oct 2026 03:53:31 UTC

Gitea 1.25.5 caches a branch-specific write-permission result across multiple refs in one pre-receive hook session, allowing a per-branch maintainer-edit grant to be reused for other refs and escalate to full repository write access.

euvd · EUVD-2026-41636 · Published

28 Oct 2026 02:57:10 UTC

Gitea 1.25.5 caches a branch-specific write-permission result across multiple refs in one pre-receive hook session, allowing a per-branch maintainer-edit grant to be reused for other refs and escalate to full repository write access.

euvd · EUVD-2026-41636 · Published

This citation shows only its exact record and strictly earlier observation times. Open complete latest history.