{"action":"Upgrade github.com/go-gitea/gitea to 1.7.6 or later.","affected":[{"fixed":"1.7.6","introduced":"0"}],"component":"github.com/go-gitea/gitea","cve_ids":["CVE-2019-11228"],"ecosystem":"Go","epss":0.01349,"exploited":false,"fixed_versions":["1.7.6"],"ghsa_id":"GHSA-q47x-6mqq-4w92","id":"tcs_01M5KFJ933ZK40CZTSYWD1934W","modified_at":"2024-08-21T15:58:57.226728Z","published_at":"2022-02-15T01:57:18Z","references":["https://osv.dev/vulnerability/GHSA-q47x-6mqq-4w92","https://nvd.nist.gov/vuln/detail/CVE-2019-11228","https://github.com/go-gitea/gitea/pull/6593","https://github.com/go-gitea/gitea/pull/6595","https://github.com/go-gitea/gitea/releases/tag/v1.7.6","https://github.com/go-gitea/gitea/releases/tag/v1.8.0-rc3"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-q47x-6mqq-4w92","url":"https://osv.dev/vulnerability/GHSA-q47x-6mqq-4w92"}],"summary":"Gitea Improper Input Validation"}