CVE-2026-22547: Gitea repository creation accepts invalid field values
Gitea versions before 1.25.5 lack validation constraints for repository creation fields, including length-limited template fields and trust model or object format values.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
giteato a version that resolves this vulnerability.Fixed in 1.25.5
Event History
Frequently Asked Questions
What is the severity of CVE-2026-22547?
The severity of CVE-2026-22547 is critical with a CVSS score of 9.1.
How do I fix CVE-2026-22547?
To fix CVE-2026-22547, update Gitea to version 1.25.5 or later, which includes validation constraints for repository creation fields.
What are the risks associated with CVE-2026-22547?
CVE-2026-22547 can lead to unauthorized or malformed repository creation, potentially impacting the integrity of the repository.
Which versions of Gitea are affected by CVE-2026-22547?
Gitea versions before 1.25.5 are affected by CVE-2026-22547.
What kind of input validation issue does CVE-2026-22547 involve?
CVE-2026-22547 involves a lack of validation for repository creation fields, including length-limited template fields and trust model or object format values.