Affected by GO-2025-4258
and 2 other vulnerabilities
GO-2025-4258: Gitea mishandles authorization for deletion of releases in code.gitea.io/gitea
GO-2025-4261: Gitea allows attackers to add attachments with forbidden file extensions in code.gitea.io/gitea
GO-2026-4274: Gitea's /api/v1/user endpoint has different responses for failed authentication depending on whether a username exists in code.gitea.io/gitea
Normalize normalizes the SVG content: set default width/height, remove unnecessary tags/attributes
It's designed to work with valid SVG content. For invalid SVG content, the returned content is not guaranteed.