gogs vulnerabilities
CVEs whose affected-version data names the gogs package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2026-82402Medium· 5.3Gogs is an open source self-hosted Git service
Gogs is an open source self-hosted Git service. Prior to 0.15.0+dev, an unauthenticated attacker can provide a backslash-containing target to the /redirect endpoint, and similar post-action redirect flows are also affected. internal/urlx…
▾ Sunlitgogs · gogsvia NVD
CVE-2025-8110High· 8.8CISA KEVPoCImproper Symbolic link handling in the PutContents API in Gogs allows Local Execution of Code.
Improper Symbolic link handling in the PutContents API in Gogs allows Local Execution of Code.
▾ Abyssalgogs · gogsEPSS 85%via NVD