Insecure functionality In github.com/gogs/gogs
This advisory was classified as a False Positive during our data review process to ensure accuracy and data quality.
Description
Duplicate Advisory: Gogs allows argument injection during the tagging of a new release
Duplicate Advisory
This advisory has been withdrawn because it is a duplicate of GHSA-m27m-h5gj-wwmg. This link is maintained to preserve external references.
Original Description
Gogs through 0.13.0 allows argument injection during the tagging of a new release. This vulnerability is still unfixed as of the time of this advisory being published.
Mitigation
Update Impact
Minimal update. May introduce new vulnerabilities or breaking changes.
Ecosystem | Package | Affected version |
|---|---|---|
 go |
Aliases
1. 2. 3.
References
1. 2.