Debian, alpine and rpm package registry private key stored in plain text

[j123b567]

Description

Private keys for debian, alpine and rpm are stored in user_setting table under debian.key.private, alpine.key.private and rpm.key.private in plain text. All other secrets in gitea are encrypted by SECRET_KEY, before storing them in database.

Gitea Version

1.22.2

Can you reproduce the bug on the Gitea demo site?

No

Log Gist

No response

Screenshots

No response

Git Version

No response

Operating System

No response

How are you running Gitea?

Running gitea myself from github release.

Database

SQLite