{"action":"Upgrade code.gitea.io/gitea to 1.16.4 or later.","affected":[{"fixed":"1.16.4","introduced":"0"}],"component":"code.gitea.io/gitea","cve_ids":["CVE-2022-0905"],"ecosystem":"Go","epss":0.00847,"exploited":false,"fixed_versions":["1.16.4"],"ghsa_id":"GHSA-jr9c-h74f-2v28","id":"tcs_01M5KFWDB9GKW9CKH1P179M1SK","modified_at":"2026-03-03T04:50:45.472605Z","published_at":"2024-08-21T15:11:40Z","references":["https://osv.dev/vulnerability/GO-2022-0609","https://github.com/advisories/GHSA-jr9c-h74f-2v28","https://nvd.nist.gov/vuln/detail/CVE-2022-0905","https://github.com/go-gitea/gitea/commit/1314f38b59748397b3429fb9bc9f9d6bac85d2f2","https://github.com/go-gitea/gitea/commit/3e5c844a7758fa29126d201f4f98bf21bca6d314","https://huntr.dev/bounties/8d221f92-b2b1-4878-bc31-66ff272e5ceb"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"GO-2022-0609","url":"https://osv.dev/vulnerability/GO-2022-0609"}],"summary":"Gitea Missing Authorization vulnerability in code.gitea.io/gitea"}