Server Side Request Forgery (SSRF) vulneraility exists in Gitea before 1.7.0 using the OpenID URL.
{ "severity": "High", "cpes": [ "cpe:2.3:a:gitea:gitea:*:*:*:*:*:*:*:*" ] }
"https://github.com/bitnami/vulndb/tree/main/data/gitea/BIT-gitea-2021-45325.json"