Skip to content
OpenAdvisories
High · 7.7 CVE-2024-39933 EUVD-2024-3599GHSA-8mm6-wmpp-mmm3GHSA-m27m-h5gj-wwmgGO-2024-2972

Gogs allows argument Injection when tagging new releases

Published Jul 4, 2024 · Updated Aug 2, 2024 · Assigned by mitre

Package: github.com/gogs/gogs Package: gogs.io/gogs Ecosystem: Go

Description

Gogs through 0.13.0 allows argument injection during the tagging of a new release.

Affected packages

EcosystemPackageAffectedFixedRecord
Go github.com/gogs/gogs all versions — GO-2024-2972
Go gogs.io/gogs < 0.13.1 0.13.1 GHSA-m27m-h5gj-wwmg

Advisories 1

References