Skip to content
OpenAdvisories

Package · Go

gogs.io/gogs

76 known vulnerabilities.

2 results · Clear filters · Feed

  • Low 3.5

    Gogs: DoS in rendering issue index pattern

    Gogs is an open source self-hosted Git service. Prior to 0.14.3, specially crafted issue index pattern can cause a panic when rendering, resulting in denial of service. In internal/markup/markup.go, RenderIssueIndexPattern renders the issue index pattern to a…

  • Low —

    Cross site scripting via cookies in gogs

    ### Impact There is no known practical impact other than it is just possible to manipulate CSRF cookie and XSS the malicious user self. ### Patches Invalid characters of CSRF tokens are stripped after reading cookie. Users should upgrade to 0.12.8 or the late…