Dismissed
(no matching packages found)
Activity log
- Created & dismissed (no matching packages found) suggestion
Gitea pre-receive hook permission cache allows full repository write access
Gitea 1.25.5 caches a branch-specific write-permission result across multiple refs in one pre-receive hook session, allowing a per-branch maintainer-edit grant to be reused for other refs and escalate to full repository write access.
References
-
GitHub Security Advisory vendor-advisory
-
Gitea v1.26.3 Release release-notes
-
Gitea v1.26.4 Release Blog Post release-notes
Affected products
Gitea Open Source Git Server
- ==1.25.5