← Terug naar CVE-database CVE-2025-68946 MEDIUM · 5.4 CVSS Gepubliceerd: 26-12-2025 CWE-79 Beschrijving In Gitea before 1.20.1, a forbidden URL scheme such as javascript: can be used for a link, aka XSS. Vendors Gitea Affected products Gitea References blog.gitea.com github.com github.com