Description
An issue was discovered in Gitea through 1.11.5. An attacker can trigger a deadlock by initiating a transfer of a repository's ownership from one organization to another.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Go | code.gitea.io/gitea | < 1.12.0 | 1.12.0 | GO-2022-0830 |
| Go | github.com/go-gitea/gitea | < 1.12.0 | 1.12.0 | GHSA-g2qx-6ghw-67hm |