Affected by GO-2022-1065 and 3 other vulnerabilities

GO-2022-1065: Gitea vulnerable to Argument Injection in code.gitea.io/gitea

GO-2023-1894: code.gitea.io/gitea Open Redirect vulnerability

GO-2023-1999: Gitea erroneous repo clones in code.gitea.io/gitea

GO-2024-3056: Gitea Cross-site Scripting Vulnerability in code.gitea.io/gitea

attachment

package

v1.17.0 Latest Latest Go to latest Published: Jul 30, 2022 License: MIT Imports: 10 Imported by: 3

Details

Valid go.mod file

The Go module system was introduced in Go 1.11 and is the official dependency management solution for Go.
Redistributable license

Redistributable licenses place minimal restrictions on how software can be used, modified, and redistributed.
Tagged version

Modules with tagged versions give importers more predictable builds.
Stable version

When a project reaches major version v1 it is considered stable.
Learn more about best practices

This section is empty.

This section is empty.

func NewAttachment(attach *repo_model.Attachment, file io.Reader) (*repo_model.Attachment, error)

NewAttachment creates a new attachment object, but do not verify.

func UploadAttachment(file io.Reader, actorID, repoID, releaseID int64, fileName, allowedTypes string) (*repo_model.Attachment, error)

UploadAttachment upload new attachment into storage and update database

This section is empty.