{"action":"Upgrade code.gitea.io/gitea to 1.16.9 or later.","affected":[{"fixed":"1.16.9","introduced":"0"}],"component":"code.gitea.io/gitea","cve_ids":["CVE-2022-38183"],"ecosystem":"Go","epss":0.00891,"exploited":false,"fixed_versions":["1.16.9"],"ghsa_id":"GHSA-fhv8-m4j4-cww2","id":"tcs_01M5KG2SVBNF922H0JM1WE4GQK","modified_at":"2026-03-03T04:55:04.505871Z","published_at":"2024-06-10T16:38:54Z","references":["https://osv.dev/vulnerability/GO-2024-2769","https://github.com/advisories/GHSA-fhv8-m4j4-cww2","https://nvd.nist.gov/vuln/detail/CVE-2022-38183","https://blog.gitea.io/2022/07/gitea-1.16.9-is-released","https://github.com/go-gitea/gitea/pull/20133","https://github.com/go-gitea/gitea/pull/20196","https://herolab.usd.de/security-advisories/usd-2022-0015"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"GO-2024-2769","url":"https://osv.dev/vulnerability/GO-2024-2769"}],"summary":"Gitea allowed assignment of private issues in code.gitea.io/gitea"}