.nav-burger { display: none !important; } @media (max-width: 1180px) { /* Match Tailwind's base layer: its important [hidden] reset otherwise wins. */ @layer base { .nav-overlay[hidden] { display: flex !important; } } .nav-overlay[hidden] { position: static; padding: 2rem 1rem; } }

Vulnerability advisory

GHSA-mcjj-2fvq-mc3r

Gogs vulnerable to Cross-site Scripting

Published Oct 11, 2022Updated May 28, 2025OSV record ↗

Also known as CVE-2022-32174GO-2022-1060

Severity

CVSS 3.xCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H

Affected versions

gogs.io/gogs Go

All gogs.io/gogs advisories →

Affected	Fixed in
`0.6.5` through `0.12.10`	No fix listed

Description

In Gogs, versions v0.6.5 through v0.12.10 are vulnerable to Stored Cross-Site Scripting (XSS) that leads to an account takeover.

References