Gitea before 1.17.3 does not sanitize and escape refs in the git backend. Arguments to git commands are mishandled.
{ "cpes": [ "cpe:2.3:a:gitea:gitea:*:*:*:*:*:*:*:*" ], "severity": "Critical" }