tocsin

Alpine/gitea: high 7.5

An attacker may cause a denial of service by crafting an Accept-Language header which ParseAcceptLanguage will take significant time to parse.

Action: Upgrade gitea to 1.17.3-r0 or later.

Affected

introducedfixedlast affected
01.17.3-r0-

Fixed versions

1.17.3-r0

Sources

published · modified · JSON