Server Side Request Forgery (SSRF) vulneraility exists in Gitea before 1.7.0 using the OpenID URL.
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2021-45325.json"