CVE-2022-30781: Gitea

High severity, CVSS 7.5. EPSS: 87.9% chance of exploitation in the next 30 days.

Gitea before 1.16.7 does not escape git fetch remote.

Affected products

• Gitea Gitea: before 1.16.7 (fixed in 1.16.7)

Published 2022-05-16. Last modified 2026-06-17.