CVE-2025-69413 – Gitea Authentication Information Disclosure

CVE ID : CVE-2025-69413

Published : Jan. 1, 2026, 5:16 a.m. | 1 hour, 9 minutes ago

Description : In Gitea before 1.25.2, /api/v1/user has different responses for failed authentication depending on whether a username exists.

Severity: 5.3 | MEDIUM

Visit the link for more details, such as CVSS details, affected products, timeline, and more…