Gitea 1.12.x and 1.13.x before 1.13.4 allows XSS via certain issue data in some situations.
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2021-28378.json"