Alpine/gitea: medium 5.3

The avatar middleware in Gitea before 1.13.6 allows Directory Traversal via a crafted URL.

Action: Upgrade gitea to 1.13.6-r0 or later.

Affected

Fixed versions

Sources

• osv: ALPINE-CVE-2021-29134#Alpine:v3.21/gitea
• https://security.alpinelinux.org/vuln/CVE-2021-29134

published 2022-03-15T21:15:07.997Z · modified 2026-11-03T06:32:38.780197494Z · JSON