add go/gogs.io/gogs/CVE-2022-0871.yml to branch

go/gogs.io/gogs/CVE-2022-0871.yml

+---
+identifier: "CVE-2022-0871"
+identifiers:
+- "GHSA-65f3-3278-7m65"
+- "CVE-2022-0871"
+package_slug: "go/gogs.io/gogs"
+title: "Improper Authorization in Gogs"
+description: "Improper Authorization in GitHub repository gogs/gogs prior to 0.12.5."
+date: "2022-03-17"
+pubdate: "2022-03-12"
+affected_range: "<0.12.5"
+fixed_versions:
+- "0.12.5"
+affected_versions: "All versions before 0.12.5"
+not_impacted: "All versions starting from 0.12.5"
+solution: "Upgrade to version 0.12.5 or above."
+urls:
+- "https://nvd.nist.gov/vuln/detail/CVE-2022-0871"
+- "https://github.com/gogs/gogs/commit/64102be2c90e1b47dbdd379873ba76c80d4b0e78"
+- "https://huntr.dev/bounties/ea82cfc9-b55c-41fe-ae58-0d0e0bd7ab62"
+- "https://github.com/advisories/GHSA-65f3-3278-7m65"
+uuid: "6301d150-9d2d-41fe-bfe1-609ebd0dd4aa"
+cwe_ids:
+- "CWE-1035"
+- "CWE-937"