—
GO-2022-0823
Gitea Exposes Private Email Addresses in github.com/go-gitea/gitea
Quick fix
GO-2022-0823 — github.com/go-gitea/gitea: upgrade to the fixed version with the command below.
go get github.com/go-gitea/gitea@v1.5.1Details
Gitea Exposes Private Email Addresses in github.com/go-gitea/gitea
Are you affected?
Enter the version of the package you're using.
Affected packages
Go/github.com/go-gitea/gitea
Introduced in:
0Fixed in: 1.5.1Fix
go get github.com/go-gitea/gitea@v1.5.1References
- https://github.com/advisories/GHSA-f5fj-7265-jxhj[ADVISORY]
- https://nvd.nist.gov/vuln/detail/CVE-2018-1000803[ADVISORY]
- https://github.com/go-gitea/gitea/commit/194a11eb110cd98fc2ba52861abf7770db6885a3[FIX]
- https://github.com/go-gitea/gitea/pull/4664[FIX]
- https://github.com/go-gitea/gitea/pull/4664/files#diff-146e0c2b5bb1ea96c9fb73d509456e57[FIX]