.nav-burger { display: none !important; } @media (max-width: 1180px) { /* Match Tailwind's base layer: its important [hidden] reset otherwise wins. */ @layer base { .nav-overlay[hidden] { display: flex !important; } } .nav-overlay[hidden] { position: static; padding: 2rem 1rem; } }

Vulnerability advisory

CVE-2021-45328

Published Feb 8, 2022Updated Oct 24, 2026OSV record ↗

Also known as BIT-gitea-2021-45328GHSA-36h2-95gj-w488GO-2022-0579

Severity

CVSS 3.xCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Affected versions

Repository

Affected commits	Fixed by commit
GIT github.com/go-gitea/gitea ↗
All commits before 96c63a49376cd71c29a92e9a1685f07653376668	`96c63a49376cd71c29a92e9a1685f07653376668`
Also listed as affected (9) `v1.4.2` `v1.4.1` `v1.4.0` `v1.4.0-rc3` `v1.4.0-rc2` `v1.4.0-rc1` `v1.1.0` `v1.0.0` `v0.9.99`
GIT github.com/jenkinsci/gitea-plugin ↗
All commits before 8288e82a157e9e3080788fd92e06023f022cac51	`8288e82a157e9e3080788fd92e06023f022cac51`
Also listed as affected (18) `1.4.2` `1.4.1` `1.4.0--rc182.9eb947470fcf` `gitea-1.3.0` `gitea-1.2.1` `gitea-1.2.0` `gitea-1.1.2` `gitea-1.1.1` `gitea-1.1.0` `gitea-1.0.8` `gitea-1.0.7` `gitea-1.0.6` `gitea-1.0.5` `gitea-1.0.4` `gitea-1.0.3` `gitea-1.0.2` `gitea-1.0.1` `gitea-1.0.0`

Description

Gitea before 1.4.3 is affected by URL Redirection to Untrusted Site ('Open Redirect') via internal URLs.

References

Advisoryblog.gitea.io/2018/06/release-of-1.4.3/ ↗
Reportgithub.com/go-gitea/gitea/issues/4332 ↗