Denial-of-service in the XML component. This vulnerability affects Firefox < 149.
Gogs has SSRF in webhook deliveries