Gogs

5 results · Clear filters · Feed

• High 7.1
  CVE-2026-52810 Public exploit

  Gogs: Write to readonly repositories using receive-pack + service=git-upload-pack confusion

  Gogs is an open source self-hosted Git service. Prior to 0.14.3, Git smart HTTP authorizes POST …/git-receive-pack using the client-supplied service query string (so ?service=git-upload-pack is evaluated as read access) while routing still runs git receive-pa…

  Gogs Gogs
  Jun 24, 2026
• High 7.1
  CVE-2026-25232 Public exploit

  Gogs has a Protected Branch Deletion Bypass in Web Interface

  Gogs is an open source self-hosted Git service. Versions 0.13.4 and below have an access control bypass vulnerability which allows any repository collaborator with Write permissions to delete protected branches (including the default branch) by sending a dire…

  Gogs Gogs gogs.io/gogs Go
  Feb 19, 2026
• High 7.2
  CVE-2026-24135 Public exploit

  Gogs vulnerable to arbitrary file deletion via path traversal in wiki page update

  Gogs is an open source self-hosted Git service. In version 0.13.3 and prior, a path traversal vulnerability exists in the updateWikiPage function of Gogs. The vulnerability allows an authenticated user with write access to a repository's wiki to delete arbitr…

  Gogs Gogs gogs.io/gogs Go
  Feb 6, 2026
• High 8.7
  CVE-2025-8110 Exploited Public exploit EPSS 80%

  File overwrite in file update API in Gogs

  Improper Symbolic link handling in the PutContents API in Gogs allows Local Execution of Code.

  Gogs Gogs gogs.io/gogs Go
  Dec 10, 2025

  KEV Jan 12, 2026
• High 8.7
  CVE-2024-55947 Public exploit EPSS 78%

  Gogs has a Path Traversal in file update API

  Gogs is an open source self-hosted Git service. A malicious user is able to write a file to an arbitrary path on the server to gain SSH access to the server. The vulnerability is fixed in 0.13.1.

  Gogs Gogs gogs.io/gogs Go
  Dec 23, 2024