{"action":"Upgrade github.com/go-gitea/gitea to 1.12.6 or later.","affected":[{"fixed":"1.12.6","introduced":"0.9.99"}],"component":"github.com/go-gitea/gitea","cve_ids":["CVE-2020-28991"],"ecosystem":"Go","epss":0.01736,"exploited":false,"fixed_versions":["1.12.6"],"ghsa_id":"GHSA-r7h7-chh4-5rvm","id":"tcs_01M5KFM98EY80T7DAGX28VEREQ","modified_at":"2024-04-24T21:11:22.865980Z","published_at":"2024-04-24T20:56:53Z","references":["https://osv.dev/vulnerability/GHSA-r7h7-chh4-5rvm","https://nvd.nist.gov/vuln/detail/CVE-2020-28991","https://github.com/go-gitea/gitea/pull/13525","https://github.com/go-gitea/gitea","https://github.com/go-gitea/gitea/releases/tag/v1.12.6"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-r7h7-chh4-5rvm","url":"https://osv.dev/vulnerability/GHSA-r7h7-chh4-5rvm"}],"summary":"Improper Access Control in Gitea"}