.nav-burger { display: none !important; } @media (max-width: 1180px) { /* Match Tailwind's base layer: its important [hidden] reset otherwise wins. */ @layer base { .nav-overlay[hidden] { display: flex !important; } } .nav-overlay[hidden] { position: static; padding: 2rem 1rem; } }

Vulnerability advisory

CVE-2018-15192

Published Aug 8, 2018Updated Oct 27, 2026OSV record ↗

Also known as GHSA-fg3x-rwq9-74cwGO-2023-1971

Severity

CVSS 3.xCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N

Affected versions

Repository

Affected commits	Fixed by commit
GIT github.com/go-gitea/gitea ↗
All commits before 280ebcbf7c761a212fb091634384847a38f25cb0	`280ebcbf7c761a212fb091634384847a38f25cb0`
280ebcbf7c761a212fb091634384847a38f25cb0 through 40bbc7320c1aca8433289fae4e2cc14ca7cc2931	No fix listed
Also listed as affected (5) `1.5.0-rc1` `1.5.0-rc2` `v1.1.0` `v1.0.0` `v0.9.99`
GIT github.com/gogs/gogs ↗
All commits through 91441c3fb29d8ead645d8fffa4658d749d5b3fc3	No fix listed
Also listed as affected (49) `v0.11.53` `v0.11.43` `v0.11.34` `v0.11.33` `v0.11.29` `v0.11.19` `v0.11.4` `v0.11` `v0.11rc` `v0.10.18` `v0.10.8` `v0.10` `v0.10rc` `v0.9.141` `v0.9.128` `v0.9.113` `v0.9.97` `v0.9.71` `v0.9.60` `v0.9.48` `v0.9.46` `v0.9.13` `v0.9.0` `v0.8.43` `v0.8.25` `v0.8.10` `v0.8.0` `v0.7.33` `v0.7.22` `v0.7.19` `v0.7.6` `v0.7.0` `v0.6.15` `v0.6.9` `v0.6.3` `v0.6.1` `v0.5.13` `v0.5.11` `v0.5.9` `v0.5.8` `v0.5.5` `v0.5.2` `v0.5.0` `v0.4.2` `v0.4.1` `v0.4.0` `v0.3.1` `v0.3.0` `v0.2.0`

Description

An SSRF vulnerability in webhooks in Gitea through 1.5.0-rc2 and Gogs through 0.11.53 allows remote attackers to access intranet services.

References

Advisorygithub.com/gogs/gogs/issues/5366 ↗
Reportgithub.com/go-gitea/gitea/issues/4624 ↗