gogs.io/gogs vulnerabilities

CVEs whose affected-version data names the gogs.io/gogs package (go). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

gogs.io/gogs vulnerabilities

Gogs Vulnerable to CSRF Leading to Organization Owner Takeover

Gogs has the ability to import local repositories via Mirror Settings

Gogs has an Open Redirect via redirect_to

Gogs Vulnerable to Privilege Escalation via Collaboration Access Mode Validation

Gogs has a Migration Redirect Bypass that Leads to Internal Repository Theft

Gogs vulnerable to RCE via git rebase --exec argument injection in pull request merge

Gogs has DOM-based XSS via Milestone Name on New Issue Page

Gogs's write-level collaborators can mutate admin-only repository settings via API

Gogs's password-reset tokens use account-activation lifetime, ignoring RESET_PASSWORD_CODE_LIVES

Gogs allows users to write to readonly repositories using receive-pack + service=git-upload-pack confusion

Gogs: UploadRepoFiles writes outside repo working tree via committed parent sym

Gogs: LFS dedupe path leaks private repo content across tenants

Gogs has Path Traversal in organization name that results in RCE through Git hooks

Gogs has Unauthenticated Asymmetric Denial of Service (DoS) via SSH Handshake Stall (File Descriptor Exhaustion)

Gogs Vulnerable to Unauthenticated Organization Teams Information Disclosure via API

Gogs's Unauthenticated Jupyter Notebook (ipynb) Sanitizer allows arbitrary data: URIs leading to XSS

Gogs has a Denial of Service in repository/wiki file listing web pages

Gogs has an Authentication Bypass via Unvalidated Reverse Proxy Headers

Gogs has SSRF in webhook deliveries

Gogs has DoS in rendering issue index pattern

Gogs has Stored XSS in `.ipynb` Preview

Gogs Missing Authorization in Attachment Download

Gogs: XSS in .ipynb files renderer due to outdated notebookjs

Gogs: Overwriting critical files results in a denial of service

OS Command Injection in gogs