Description
Gogs through 0.13.0 allows argument injection during the previewing of changes.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Go | github.com/gogs/gogs | all versions | — | GO-2024-2971 |
| Go | gogs.io/gogs | < 0.13.1 | 0.13.1 | GHSA-9pp6-wq8c-3w2c |
Advisories 1
- WID-SEC-2026-2013 Gogs: Mehrere Schwachstellen BSI CERT-Bund (WID) · Jun 24, 2026