x/vulndb: potential Go vuln in gogs.io/gogs: GHSA-g6xv-8q23-w2q3

[GoVulnBot]

In GitHub Security Advisory GHSA-g6xv-8q23-w2q3, there is a vulnerability in the following Go packages or modules:

Unit	Fixed	Vulnerable Ranges
gogs.io/gogs	0.5.8	>= 0.3.1, < 0.5.8

Cross references:

• CVE-2014-8682 appears in issue x/vulndb: potential Go vuln in gogs.io/gogs: GHSA-g6xv-8q23-w2q3 #831 NOT_IMPORTABLE
• GHSA-g6xv-8q23-w2q3 appears in issue x/vulndb: potential Go vuln in gogs.io/gogs: GHSA-g6xv-8q23-w2q3 #831 NOT_IMPORTABLE

See doc/triage.md for instructions on how to triage this report.

modules:
  - module: TODO
    versions:
      - introduced: 0.3.1
        fixed: 0.5.8
    packages:
      - package: gogs.io/gogs
description: Multiple SQL injection vulnerabilities in Gogs (aka Go Git Service) 0.3.1-9
    through 0.5.x before 0.5.6.1105 Beta allow remote attackers to execute arbitrary
    SQL commands via the q parameter to (1) api/v1/repos/search, which is not properly
    handled in models/repo.go, or (2) api/v1/users/search, which is not properly handled
    in models/user.go.
cves:
  - CVE-2014-8682
ghsas:
  - GHSA-g6xv-8q23-w2q3

[tatianab]

Duplicate of #831