| Package | Affected versions | Patched versions |
|---|---|---|
| code.gitea.io/gitea | < 1.25.5 | 1.25.5 |
Gitea versions before 1.25.5 do not consistently enforce OAuth2 authorization code expiry and single-use behavior during token exchange.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free