Gitea versions before 1.25.5 have insufficient permission checks for updating or rebasing pull request branches.