Skip to content
OpenAdvisories

Package · Go

github.com/gogs/gogs

5 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

5 results · Feed

  • Medium 6.3
    CVE-2025-47943

    Gogs stored XSS in PDF renderer

    Gogs is an open source self-hosted Git service. In application version 0.14.0+dev and prior, there is a stored cross-site scripting (XSS) vulnerability present in Gogs, which allows client-side Javascript code execution. The vulnerability is caused by the usa…

    Gogs Gogs gogs.io/gogs github.com/gogs/gogs Go
  • High 7.7
    CVE-2024-39933

    Gogs allows argument Injection when tagging new releases

    Gogs through 0.13.0 allows argument injection during the tagging of a new release.

    gogs.io/gogs github.com/gogs/gogs Go
  • Critical 9.9
    CVE-2024-39930 Public exploit

    Gogs has an argument Injection in the built-in SSH server

    The built-in SSH server of Gogs through 0.13.0 allows argument injection in internal/ssh/ssh.go, leading to remote code execution. Authenticated attackers can exploit this by opening an SSH connection and sending a malicious --split-string env request if the …

    gogs.io/gogs github.com/gogs/gogs Go
  • Critical 9.9
    CVE-2024-39932 EPSS 16%

    Gogs allows argument injection during the previewing of changes

    Gogs through 0.13.0 allows argument injection during the previewing of changes.

    gogs.io/gogs github.com/gogs/gogs Go
  • Critical 9.9
    CVE-2024-39931 EPSS 53%

    Gogs allows deletion of internal files

    Gogs through 0.13.0 allows deletion of internal files.

    gogs.io/gogs github.com/gogs/gogs Go