{"action":"Upgrade code.gitea.io/gitea to 1.16.9 or later.","affected":[{"fixed":"1.16.9","introduced":"0"}],"component":"code.gitea.io/gitea","cve_ids":["CVE-2022-38183"],"ecosystem":"Go","epss":0.00891,"exploited":false,"fixed_versions":["1.16.9"],"ghsa_id":"GHSA-fhv8-m4j4-cww2","id":"tcs_01M5KF9AKNMTEKRDPW5X3BNBNK","modified_at":"2024-09-06T21:37:24Z","published_at":"2022-08-13T00:00:25Z","references":["https://osv.dev/vulnerability/GHSA-fhv8-m4j4-cww2","https://nvd.nist.gov/vuln/detail/CVE-2022-38183","https://github.com/go-gitea/gitea/pull/20133","https://github.com/go-gitea/gitea/pull/20196","https://blog.gitea.io/2022/07/gitea-1.16.9-is-released","https://github.com/advisories/GHSA-fhv8-m4j4-cww2","https://github.com/go-gitea/gitea","https://herolab.usd.de/security-advisories/usd-2022-0015","https://pkg.go.dev/vuln/GO-2024-2769"],"severity":{"label":"medium","score":6.5},"sources":[{"source":"osv","source_id":"GHSA-fhv8-m4j4-cww2","url":"https://osv.dev/vulnerability/GHSA-fhv8-m4j4-cww2"}],"summary":"Gitea allowed assignment of private issues"}