CVE-2026-25779: Gitea Open Source Git Server

Medium severity, CVSS 6.1. EPSS: 0.3% chance of exploitation in the next 30 days.

Gitea versions up to and including 1.25.4 allow redirect bypasses through raw or percent-encoded backslashes in redirect_to values.

Affected products

• Gitea Gitea Open Source Git Server: up to and including 1.25.4

Published 2026-07-03. Last modified 2026-07-07.