Affecting github.com/gogs/gogs/routes/user package, versions <0.12
github.com/gogs/gogs/routes/user is a painless self-hosted Git service.
Affected versions of the package are vulnerable to Open Redirect. An attacker could redirect users to arbitrary websites and conduct phishing attacks via an initial
/\ substring in the user/login
github.com/gogs/gogs/routes/user to version 0.12 or higher.