Go/code.gitea.io/gitea CVE-2024-6886: critical 9.8, EPSS 32.97%
Gitea Cross-site Scripting Vulnerability
Action: Upgrade code.gitea.io/gitea to 1.22.1 or later.
go get code.gitea.io/gitea@v1.22.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.22.1 | - |
Fixed versions
| 1.22.1 |
Sources
- osv: GHSA-4h4p-553m-46qh
- https://nvd.nist.gov/vuln/detail/CVE-2024-6886
- https://github.com/go-gitea/gitea/pull/31200
- https://github.com/go-gitea/gitea/commit/b6280f4d21309cfae7cc07f74173354c664d5e10
- https://blog.gitea.com/release-of-1.22.1
- https://github.com/go-gitea/gitea
- https://pkg.go.dev/vuln/GO-2024-3056
CVE-2024-6886 · published · modified · JSON