Skip to content
OpenAdvisories

Package · Go

github.com/gogs/gogs

5 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.9
    CVE-2024-39930 Public exploit

    Gogs has an argument Injection in the built-in SSH server

    The built-in SSH server of Gogs through 0.13.0 allows argument injection in internal/ssh/ssh.go, leading to remote code execution. Authenticated attackers can exploit this by opening an SSH connection and sending a malicious --split-string env request if the …

    gogs.io/gogs github.com/gogs/gogs Go