Skip to content
OpenAdvisories

Package · Go

github.com/gogs/gogs

5 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Critical 9.9
    CVE-2024-39930 Public exploit

    Gogs has an argument Injection in the built-in SSH server

    The built-in SSH server of Gogs through 0.13.0 allows argument injection in internal/ssh/ssh.go, leading to remote code execution. Authenticated attackers can exploit this by opening an SSH connection and sending a malicious --split-string env request if the …

    gogs.io/gogs github.com/gogs/gogs Go
  • Critical 9.9
    CVE-2024-39932 EPSS 16%

    Gogs allows argument injection during the previewing of changes

    Gogs through 0.13.0 allows argument injection during the previewing of changes.

    gogs.io/gogs github.com/gogs/gogs Go
  • Critical 9.9
    CVE-2024-39931 EPSS 53%

    Gogs allows deletion of internal files

    Gogs through 0.13.0 allows deletion of internal files.

    gogs.io/gogs github.com/gogs/gogs Go