{"action":"Upgrade code.gitea.io/gitea to 1.16.7 or later.","affected":[{"fixed":"1.16.7","introduced":"0"}],"component":"code.gitea.io/gitea","cve_ids":["CVE-2022-30781"],"ecosystem":"Go","epss":0.8793,"exploited":false,"fixed_versions":["1.16.7"],"ghsa_id":"GHSA-p5f9-c9j9-g8qx","id":"tcs_01M5KFVKY0W9BSS0782S9W6GC5","modified_at":"2026-03-03T04:50:23.949796Z","published_at":"2024-08-21T15:11:31Z","references":["https://osv.dev/vulnerability/GO-2022-0450","https://github.com/advisories/GHSA-p5f9-c9j9-g8qx","https://nvd.nist.gov/vuln/detail/CVE-2022-30781","http://packetstormsecurity.com/files/168400/Gitea-1.16.6-Remote-Code-Execution.html","http://packetstormsecurity.com/files/169928/Gitea-Git-Fetch-Remote-Code-Execution.html","https://blog.gitea.io/2022/05/gitea-1.16.7-is-released","https://github.com/go-gitea/gitea/pull/19487","https://github.com/go-gitea/gitea/pull/19490"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"GO-2022-0450","url":"https://osv.dev/vulnerability/GO-2022-0450"}],"summary":"Shell command injection in gitea in code.gitea.io/gitea"}