gogs.io/gogs (Go)
Advisories
148
Latest version
—
License
—
OpenSSF Scorecard
—
How to fix
Upgrading to 0.14.3 or later clears every advisory below that has a fix.
Upgrade commands
go
go get gogs.io/gogs@v0.14.3 && go mod tidyKnown vulnerabilities
| Advisory | Severity | Affected | Fixed in |
|---|---|---|---|
| GHSA-3w28-36p9-w929 Gogs's Unauthenticated Jupyter Notebook (ipynb) Sanitizer allows arbitrary data: URIs leading to XSS |
Medium EPSS 0.68% |
< 0.14.3 | 0.14.3 |
| GHSA-3w28-36p9-w929 Gogs's Unauthenticated Jupyter Notebook (ipynb) Sanitizer allows arbitrary data: URIs leading to XSS |
Medium EPSS 0.68% |
all versions | No fix yet |
| GHSA-744x-3838-5r56 Gogs Vulnerable to Unauthenticated Organization Teams Information Disclosure via API |
Medium EPSS 1.49% |
< 0.14.3 | 0.14.3 |
| GHSA-744x-3838-5r56 Gogs Vulnerable to Unauthenticated Organization Teams Information Disclosure via API |
Medium EPSS 1.49% |
all versions | No fix yet |
| GHSA-xp79-5mx3-jx52 Gogs has Unauthenticated Asymmetric Denial of Service (DoS) via SSH Handshake Stall (File Descriptor Exhaustion) |
Medium EPSS 0.55% |
all versions | No fix yet |
| GHSA-xp79-5mx3-jx52 Gogs has Unauthenticated Asymmetric Denial of Service (DoS) via SSH Handshake Stall (File Descriptor Exhaustion) |
Medium EPSS 0.55% |
< 0.14.3 | 0.14.3 |
| GHSA-c39w-43gm-34h5 Gogs has Path Traversal in organization name that results in RCE through Git hooks |
Critical EPSS 1.11% |
all versions | No fix yet |
| GHSA-c39w-43gm-34h5 Gogs has Path Traversal in organization name that results in RCE through Git hooks |
Critical EPSS 1.11% |
< 0.14.3 | 0.14.3 |
| GHSA-6p9m-q3jp-47h4 Gogs: LFS dedupe path leaks private repo content across tenants |
High EPSS 0.24% |
< 0.14.3 | 0.14.3 |
| GHSA-6p9m-q3jp-47h4 Gogs: LFS dedupe path leaks private repo content across tenants |
High EPSS 0.24% |
all versions | No fix yet |
| GHSA-89mr-xqfv-758m Gogs: UploadRepoFiles writes outside repo working tree via committed parent sym |
Critical EPSS 0.47% |
all versions | No fix yet |
| GHSA-89mr-xqfv-758m Gogs: UploadRepoFiles writes outside repo working tree via committed parent sym |
Critical EPSS 0.47% |
< 0.14.3 | 0.14.3 |
| GHSA-wmfg-5p4h-5fw3 Gogs allows users to write to readonly repositories using receive-pack + service=git-upload-pack confusion |
High EPSS 0.43% |
< 0.14.3 | 0.14.3 |
| GHSA-wmfg-5p4h-5fw3 Gogs allows users to write to readonly repositories using receive-pack + service=git-upload-pack confusion |
High EPSS 0.43% |
all versions | No fix yet |
| GHSA-5c3f-6486-3g7g Gogs's password-reset tokens use account-activation lifetime, ignoring RESET_PASSWORD_CODE_LIVES |
Medium EPSS 0.20% |
< 0.14.3 | 0.14.3 |
| GHSA-5c3f-6486-3g7g Gogs's password-reset tokens use account-activation lifetime, ignoring RESET_PASSWORD_CODE_LIVES |
Medium EPSS 0.20% |
all versions | No fix yet |
| GHSA-268j-37xf-pp52 Gogs's write-level collaborators can mutate admin-only repository settings via API |
High EPSS 0.48% |
all versions | No fix yet |
| GHSA-268j-37xf-pp52 Gogs's write-level collaborators can mutate admin-only repository settings via API |
High EPSS 0.48% |
< 0.14.3 | 0.14.3 |
| GHSA-vcm5-gvmp-78mp Gogs has DOM-based XSS via Milestone Name on New Issue Page |
Medium EPSS 0.48% |
< 0.14.3 | 0.14.3 |
| GHSA-vcm5-gvmp-78mp Gogs has DOM-based XSS via Milestone Name on New Issue Page |
Medium EPSS 0.48% |
all versions | No fix yet |
| GHSA-qf6p-p7ww-cwr9 Gogs vulnerable to RCE via git rebase --exec argument injection in pull request merge |
Critical EPSS 7.93% |
< 0.14.3 | 0.14.3 |
| GHSA-qf6p-p7ww-cwr9 Gogs vulnerable to RCE via git rebase --exec argument injection in pull request merge |
Critical EPSS 7.93% |
all versions | No fix yet |
| GHSA-g2f5-gjr4-qjvm Gogs has a Migration Redirect Bypass that Leads to Internal Repository Theft |
High EPSS 0.38% |
< 0.14.3 | 0.14.3 |
| GHSA-g2f5-gjr4-qjvm Gogs has a Migration Redirect Bypass that Leads to Internal Repository Theft |
High EPSS 0.38% |
all versions | No fix yet |
| GHSA-4565-r4x7-hg8j Gogs Vulnerable to Privilege Escalation via Collaboration Access Mode Validation |
Medium EPSS 0.50% |
< 0.14.3 | 0.14.3 |
| GHSA-4565-r4x7-hg8j Gogs Vulnerable to Privilege Escalation via Collaboration Access Mode Validation |
Medium EPSS 0.50% |
all versions | No fix yet |
| GHSA-xxhq-69mf-w8cr Gogs has an Open Redirect via redirect_to |
Medium EPSS 0.55% |
all versions | No fix yet |
| GHSA-xxhq-69mf-w8cr Gogs has an Open Redirect via redirect_to |
Medium EPSS 0.55% |
< 0.14.3 | 0.14.3 |
| GHSA-wv27-2vqp-j7g5 Gogs has the ability to import local repositories via Mirror Settings |
High EPSS 0.57% |
all versions | No fix yet |
| GHSA-wv27-2vqp-j7g5 Gogs has the ability to import local repositories via Mirror Settings |
High EPSS 0.57% |
< 0.14.3 | 0.14.3 |
| GHSA-pwx3-qcgw-vh7h Gogs Vulnerable to CSRF Leading to Organization Owner Takeover |
High EPSS 0.25% |
< 0.14.3 | 0.14.3 |
| GHSA-pwx3-qcgw-vh7h Gogs Vulnerable to CSRF Leading to Organization Owner Takeover |
High EPSS 0.25% |
all versions | No fix yet |
| GHSA-p9f5-h3rx-j5qw Gogs Missing Authorization in Attachment Download |
High EPSS 0.42% |
< 0.14.3 | 0.14.3 |
| GHSA-p9f5-h3rx-j5qw Gogs Missing Authorization in Attachment Download |
High EPSS 0.42% |
all versions | No fix yet |
| GHSA-jq8v-rmf6-65jw Gogs has Stored XSS in `.ipynb` Preview |
High EPSS 0.43% |
all versions | No fix yet |
| GHSA-jq8v-rmf6-65jw Gogs has Stored XSS in `.ipynb` Preview |
High EPSS 0.43% |
< 0.14.3 | 0.14.3 |
| GHSA-4j89-2c4f-44c6 Gogs has DoS in rendering issue index pattern |
Low EPSS 0.28% |
< 0.14.3 | 0.14.3 |
| GHSA-4j89-2c4f-44c6 Gogs has DoS in rendering issue index pattern |
Low EPSS 0.28% |
all versions | No fix yet |
| GHSA-c4v7-xg93-qf8g Gogs has SSRF in webhook deliveries |
High EPSS 0.42% |
all versions | No fix yet |
| GHSA-c4v7-xg93-qf8g Gogs has SSRF in webhook deliveries |
High EPSS 0.42% |
< 0.14.3 | 0.14.3 |
| GHSA-w6j9-vw59-27wv Gogs has an Authentication Bypass via Unvalidated Reverse Proxy Headers |
High EPSS 0.86% |
< 0.14.3 | 0.14.3 |
| GHSA-w6j9-vw59-27wv Gogs has an Authentication Bypass via Unvalidated Reverse Proxy Headers |
High EPSS 0.86% |
all versions | No fix yet |
| GHSA-3qq3-668m-v9mj Gogs has a Denial of Service in repository/wiki file listing web pages |
Medium EPSS 0.44% |
all versions | No fix yet |
| GHSA-3qq3-668m-v9mj Gogs has a Denial of Service in repository/wiki file listing web pages |
Medium EPSS 0.44% |
< 0.14.3 | 0.14.3 |
| GHSA-6vxv-wg6j-5qwp Gogs: XSS in .ipynb files renderer due to outdated notebookjs |
High | all versions | No fix yet |
| GHSA-6vxv-wg6j-5qwp Gogs: XSS in .ipynb files renderer due to outdated notebookjs |
High | < 0.14.3 | 0.14.3 |
| GHSA-pm6v-2h4w-4rp2 Gogs: Overwriting critical files results in a denial of service |
High EPSS 0.53% |
all versions | No fix yet |
| GHSA-pm6v-2h4w-4rp2 Gogs: Overwriting critical files results in a denial of service |
High EPSS 0.53% |
< 0.14.0 | 0.14.0 |
| GHSA-vgjm-2cpf-4g7c Gogs: DOM-based XSS via milestone selection |
Medium EPSS 0.22% |
all versions | No fix yet |
| GHSA-vgjm-2cpf-4g7c Gogs: DOM-based XSS via milestone selection |
Medium EPSS 0.22% |
<= 0.13.3 | No fix yet |
| GHSA-x9p5-w45c-7ffc Gogs: Access tokens get exposed through URL params in API requests |
Medium EPSS 0.29% |
all versions | No fix yet |
| GHSA-x9p5-w45c-7ffc Gogs: Access tokens get exposed through URL params in API requests |
Medium EPSS 0.29% |
<= 0.13.3 | No fix yet |
| GHSA-vgvf-m4fw-938j Gogs: Stored XSS in branch and wiki views through author and committer names |
Medium EPSS 0.22% |
all versions | No fix yet |
| GHSA-vgvf-m4fw-938j Gogs: Stored XSS in branch and wiki views through author and committer names |
Medium EPSS 0.22% |
<= 0.13.3 | No fix yet |
| GHSA-v9vm-r24h-6rqm Gogs: Release tag option injection in release deletion |
High EPSS 0.54% |
all versions | No fix yet |
| GHSA-v9vm-r24h-6rqm Gogs: Release tag option injection in release deletion |
High EPSS 0.54% |
< 0.14.2 | 0.14.2 |
| GHSA-xrcr-gmf5-2r8j Gogs: Stored XSS via data URI in issue comments |
Medium EPSS 0.35% |
< 0.14.2 | 0.14.2 |
| GHSA-xrcr-gmf5-2r8j Gogs: Stored XSS via data URI in issue comments |
Medium EPSS 0.35% |
all versions | No fix yet |
| GHSA-cj4v-437j-jq4c Gogs: Cross-repository LFS object overwrite via missing content hash verification |
Critical EPSS 0.37% |
all versions | No fix yet |
| GHSA-cj4v-437j-jq4c Gogs: Cross-repository LFS object overwrite via missing content hash verification |
Critical EPSS 0.37% |
< 0.14.2 | 0.14.2 |
| GHSA-fc3h-92p8-h36f Unauthenticated File Upload in Gogs |
Critical EPSS 0.68% |
< 0.14.1 | 0.14.1 |
| GHSA-fc3h-92p8-h36f Unauthenticated File Upload in Gogs |
Critical EPSS 0.68% |
all versions | No fix yet |
| GHSA-2c6v-8r3v-gh6p Gogs has a Protected Branch Deletion Bypass in Web Interface |
High EPSS 0.48% |
< 0.14.1 | 0.14.1 |
| GHSA-2c6v-8r3v-gh6p Gogs has a Protected Branch Deletion Bypass in Web Interface |
High EPSS 0.48% |
all versions | No fix yet |
| GHSA-cv22-72px-f4gh Gogs has an Authorization Bypass Allows Cross-Repository Label Modification in Gogs |
Medium EPSS 0.30% |
< 0.14.0 | 0.14.0 |
| GHSA-cv22-72px-f4gh Gogs has an Authorization Bypass Allows Cross-Repository Label Modification in Gogs |
Medium EPSS 0.30% |
all versions | No fix yet |
| GHSA-jj5m-h57j-5gv7 Gogs Allows Cross-Repository Comment Deletion via DeleteComment |
Low EPSS 0.30% |
< 0.14.0 | 0.14.0 |
| GHSA-jj5m-h57j-5gv7 Gogs Allows Cross-Repository Comment Deletion via DeleteComment |
Low EPSS 0.30% |
all versions | No fix yet |
| GHSA-rjv5-9px2-fqw6 Gogs has authorization bypass in repository deletion API |
Medium | < 0.13.4 | 0.13.4 |
| GHSA-rjv5-9px2-fqw6 Gogs has authorization bypass in repository deletion API |
Medium | all versions | No fix yet |
| GHSA-26gq-grmh-6xm6 Gogs vulnerable to Stored XSS via Mermaid diagrams |
High | all versions | No fix yet |
| GHSA-26gq-grmh-6xm6 Gogs vulnerable to Stored XSS via Mermaid diagrams |
High | < 0.13.4 | 0.13.4 |
| GHSA-jp7c-wj6q-3qf2 Gogs vulnerable to arbitrary file deletion via Path Traversal in wiki page update |
High EPSS 0.96% |
all versions | No fix yet |
| GHSA-jp7c-wj6q-3qf2 Gogs vulnerable to arbitrary file deletion via Path Traversal in wiki page update |
High EPSS 0.96% |
< 0.13.4 | 0.13.4 |
| GHSA-mrph-w4hh-gx3g Gogs has arbitrary file read/write via Path Traversal in Git hook editing |
Medium EPSS 0.51% |
all versions | No fix yet |
| GHSA-mrph-w4hh-gx3g Gogs has arbitrary file read/write via Path Traversal in Git hook editing |
Medium EPSS 0.51% |
< 0.13.4 | 0.13.4 |
| GHSA-5qhx-gwfj-6jqr Gogs user can update repository content with read-only permission |
Medium EPSS 0.32% |
< 0.13.4 | 0.13.4 |
| GHSA-5qhx-gwfj-6jqr Gogs user can update repository content with read-only permission |
Medium EPSS 0.32% |
all versions | No fix yet |
| GHSA-cr88-6mqm-4g57 Gogs has a Denial of Service issue |
Medium EPSS 0.38% |
all versions | No fix yet |
| GHSA-cr88-6mqm-4g57 Gogs has a Denial of Service issue |
Medium EPSS 0.38% |
< 0.13.4 | 0.13.4 |
| GHSA-p6x6-9mx6-26wj Gogs Vulnerable to 2FA Bypass via Recovery Code |
High EPSS 0.48% |
>= 0.11.19, < 0.13.4 | 0.13.4 |
| GHSA-p6x6-9mx6-26wj Gogs Vulnerable to 2FA Bypass via Recovery Code |
High EPSS 0.48% |
>= 0.11.19 | No fix yet |
| GHSA-gg64-xxr9-qhjp Gogs's update .git/config file allows remote command execution |
Critical EPSS 1.40% |
< 0.13.4 | 0.13.4 |
| GHSA-gg64-xxr9-qhjp Gogs's update .git/config file allows remote command execution |
Critical EPSS 1.40% |
all versions | No fix yet |
| GHSA-mq8m-42gh-wq7r Gogs vulnerable to a bypass of CVE-2024-55947 Known exploited |
High EPSS 85.20% |
<= 0.13.3 | No fix yet |
| GHSA-mq8m-42gh-wq7r Gogs vulnerable to a bypass of CVE-2024-55947 Known exploited |
High EPSS 85.20% |
<= 0.13.3 | No fix yet |
| GHSA-mq8m-42gh-wq7r Gogs vulnerable to a bypass of CVE-2024-55947 Known exploited |
High EPSS 85.20% |
all versions | No fix yet |
| GHSA-xh32-cx6c-cp4v Gogs XSS allowed by stored call in PDF renderer |
Medium EPSS 0.40% |
< 0.13.3-0.20250608224432-110117b2e5e5 | 0.13.3-0.20250608224432-110117b2e5e5 |
| GHSA-xh32-cx6c-cp4v Gogs XSS allowed by stored call in PDF renderer |
Medium EPSS 0.40% |
< 0.13.3-0.20250608224432-110117b2e5e5 | 0.13.3-0.20250608224432-110117b2e5e5 |
| GHSA-wj44-9vcg-wjq7 Gogs allows deletion of internal files which leads to remote command execution |
Critical EPSS 1.15% |
< 0.13.3 | 0.13.3 |
| GHSA-wj44-9vcg-wjq7 Gogs allows deletion of internal files which leads to remote command execution |
Critical EPSS 1.15% |
< 0.13.3 | 0.13.3 |
| GHSA-qf5v-rp47-55gg Path Traversal in file update API in gogs |
High EPSS 77.84% |
< 0.13.1 | 0.13.1 |
| GHSA-qf5v-rp47-55gg Path Traversal in file update API in gogs |
High EPSS 77.84% |
< 0.13.1 | 0.13.1 |
| GHSA-r7j8-5h9c-f6fx Remote Command Execution in file editing in gogs |
Critical EPSS 0.85% |
< 0.13.1 | 0.13.1 |
| GHSA-r7j8-5h9c-f6fx Remote Command Execution in file editing in gogs |
Critical EPSS 0.85% |
< 0.13.1 | 0.13.1 |
| GHSA-phm4-wf3h-pc3r Remote Code Execution in Gogs |
High EPSS 16.50% |
< 0.13.2 | 0.13.2 |
| GHSA-phm4-wf3h-pc3r Remote Code Execution in Gogs |
High EPSS 16.50% |
all versions | No fix yet |
| GHSA-m27m-h5gj-wwmg Duplicate Advisory: Gogs allows argument injection during the tagging of a new release |
High EPSS 0.69% |
< 0.13.1 | 0.13.1 |
| GHSA-9pp6-wq8c-3w2c Gogs allows argument injection during the previewing of changes |
Critical EPSS 16.30% |
< 0.13.1 | 0.13.1 |
| GHSA-ccqv-43vm-4f3w Duplicate Advisory: Gogs allows deletion of internal files |
Critical EPSS 52.66% |
< 0.13.1 | 0.13.1 |
| GHSA-vm62-9jw3-c8w3 Duplicate Advisory: github.com/gogs/gogs affected by CVE-2024-39930 |
Critical EPSS 7.74% |
< 0.13.1 | 0.13.1 |
| GHSA-pfvh-p8qp-9ww9 Gogs OS Command Injection vulnerability |
Critical EPSS 97.84% |
< 0.12.11 | 0.12.11 |
| GHSA-pfvh-p8qp-9ww9 Gogs OS Command Injection vulnerability |
Critical EPSS 97.84% |
< 0.12.11 | 0.12.11 |
| GHSA-mcjj-2fvq-mc3r Gogs vulnerable to Cross-site Scripting |
Critical EPSS 58.25% |
>= 0.6.5 | No fix yet |
| GHSA-mcjj-2fvq-mc3r Gogs vulnerable to Cross-site Scripting |
Critical EPSS 58.25% |
>= 0.6.5, <= 0.12.10 | No fix yet |
| GHSA-6vcc-v9vw-g2x5 Path Traversal in Git HTTP endpoints in Gogs |
High EPSS 36.73% |
< 0.12.9 | 0.12.9 |
| GHSA-6vcc-v9vw-g2x5 Path Traversal in Git HTTP endpoints in Gogs |
High EPSS 36.73% |
< 0.12.9 | 0.12.9 |
| GHSA-67mx-jc2f-jgjm OS Command Injection in file editor in Gogs |
Critical EPSS 4.22% |
< 0.12.9 | 0.12.9 |
| GHSA-67mx-jc2f-jgjm OS Command Injection in file editor in Gogs |
Critical EPSS 4.22% |
< 0.12.9 | 0.12.9 |
| GHSA-xq4v-vrp9-vcf2 Cross-site Scripting vulnerability in repository issue list in Gogs |
Medium EPSS 0.74% |
< 0.12.9 | 0.12.9 |
| GHSA-xq4v-vrp9-vcf2 Cross-site Scripting vulnerability in repository issue list in Gogs |
Medium EPSS 0.74% |
< 0.12.9 | 0.12.9 |
| GHSA-994f-7g86-qr56 Path Traversal in file editor on Windows in Gogs |
Critical EPSS 2.31% |
< 0.12.9 | 0.12.9 |
| GHSA-994f-7g86-qr56 Path Traversal in file editor on Windows in Gogs |
Critical EPSS 2.31% |
< 0.12.9 | 0.12.9 |
| GHSA-958j-443g-7mm7 OS Command Injection in gogs |
Critical EPSS 1.84% |
< 0.12.8 | 0.12.8 |
| GHSA-958j-443g-7mm7 OS Command Injection in gogs |
Critical EPSS 1.84% |
< 0.12.8 | 0.12.8 |
| GHSA-pj96-4jhv-v792 Cross site scripting via cookies in gogs |
Low | < 0.12.8 | 0.12.8 |
| GHSA-pj96-4jhv-v792 Cross site scripting via cookies in gogs |
Low | < 0.12.8 | 0.12.8 |
| GHSA-56j7-2pm8-rgmx OS Command Injection in gogs |
High EPSS 2.20% |
< 0.12.8 | 0.12.8 |
| GHSA-56j7-2pm8-rgmx OS Command Injection in gogs |
High EPSS 2.20% |
< 0.12.8 | 0.12.8 |
| GHSA-w689-557m-2cvq Server-Side Request Forgery in gogs webhook |
Medium EPSS 1.12% |
< 0.12.8 | 0.12.8 |
| GHSA-w689-557m-2cvq Server-Side Request Forgery in gogs webhook |
Medium EPSS 1.12% |
< 0.12.8 | 0.12.8 |
| GHSA-fg3x-rwq9-74cw Gogs and Gitea SSRF Vulnerability |
High EPSS 2.12% |
< 0.12.0 | 0.12.0 |
| GHSA-fg3x-rwq9-74cw Gogs and Gitea SSRF Vulnerability |
High EPSS 2.12% |
< 0.12.0 | 0.12.0 |
| GHSA-px5r-fqj6-r2f8 Gogs XSS Vulnerability |
Medium EPSS 0.87% |
< 0.12.0 | 0.12.0 |
| GHSA-px5r-fqj6-r2f8 Gogs XSS Vulnerability |
Medium EPSS 0.87% |
< 0.12.0 | 0.12.0 |
| GHSA-9hxg-w7qf-hh93 Gogs Directory Traversal |
High EPSS 3.29% |
< 0.11.80-0.20181218063808-ff93d9dbda5c | 0.11.80-0.20181218063808-ff93d9dbda5c |
| GHSA-ff28-f46g-r9g8 Cross-site Scripting in Gogs |
Medium EPSS 0.72% |
< 0.12.7 | 0.12.7 |
| GHSA-ff28-f46g-r9g8 Cross-site Scripting in Gogs |
Medium EPSS 0.72% |
< 0.12.7 | 0.12.7 |
| GHSA-5gjh-5j4f-cpwv Unrestricted Upload of File with Dangerous Type in Gogs |
High EPSS 65.94% |
< 0.12.6 | 0.12.6 |
| GHSA-5gjh-5j4f-cpwv Unrestricted Upload of File with Dangerous Type in Gogs |
High EPSS 65.94% |
< 0.12.6 | 0.12.6 |
| GHSA-q347-cg56-pcq4 SSRF in repository migration |
Medium | < 0.12.5 | 0.12.5 |
| GHSA-q347-cg56-pcq4 SSRF in repository migration |
Medium | < 0.12.5 | 0.12.5 |
| GHSA-65f3-3278-7m65 Duplicate Advisory: Improper Authorization in Gogs Withdrawn |
High | < 0.12.5 | 0.12.5 |
| GHSA-gw5h-h6hj-f56g Gogs vulnerable to improper PAM authorization handling |
Critical EPSS 1.24% |
< 0.12.5 | 0.12.5 |
| GHSA-gw5h-h6hj-f56g Gogs vulnerable to improper PAM authorization handling |
Critical EPSS 1.24% |
< 0.12.5 | 0.12.5 |
| GHSA-7v5r-r995-q2x2 SSRF in repository migration |
Medium EPSS 3.42% |
< 0.12.5 | 0.12.5 |
| GHSA-7v5r-r995-q2x2 SSRF in repository migration |
Medium EPSS 3.42% |
< 0.12.5 | 0.12.5 |
| GHSA-9hx4-qm7h-x84j Cross-site Scripting in Gogs |
Medium EPSS 1.91% |
>= 0.3.1, < 0.5.8 | 0.5.8 |
| GHSA-9hx4-qm7h-x84j Cross-site Scripting in Gogs |
Medium EPSS 1.91% |
>= 0.3.1, < 0.5.8 | 0.5.8 |
| GHSA-g6xv-8q23-w2q3 SQL Injection in Gogs |
High EPSS 32.62% |
>= 0.3.1, < 0.5.8 | 0.5.8 |
| GHSA-g6xv-8q23-w2q3 SQL Injection in Gogs |
High EPSS 32.62% |
>= 0.3.1, < 0.5.8 | 0.5.8 |
| GHSA-cpgw-2wxr-pww3 Open Redirect |
Medium EPSS 1.32% |
< 0.12.0 | 0.12.0 |
| GHSA-cpgw-2wxr-pww3 Open Redirect |
Medium EPSS 1.32% |
< 0.12.0 | 0.12.0 |
| GHSA-4c7m-vv47-7c69 Insecure Permissions in Gogs |
Medium EPSS 0.93% |
< 0.12.0 | 0.12.0 |
| GHSA-4c7m-vv47-7c69 Insecure Permissions in Gogs |
Medium EPSS 0.93% |
< 0.12.0 | 0.12.0 |
| GHSA-5r2v-6gm6-vpvh Insecure Permissions in Gogs |
Critical EPSS 1.53% |
< 0.11.91 | 0.11.91 |
| GHSA-5r2v-6gm6-vpvh Insecure Permissions in Gogs |
Critical EPSS 1.53% |
< 0.11.91 | 0.11.91 |
| GHSA-mr6h-chqp-p9g2 SQL Injection in gogs.io/gogs |
Medium EPSS 4.44% |
>= 0.3.1, < 0.5.8 | 0.5.8 |
MergeHarbor checks every repository's dependencies against this database, ranks what matters by exploitability and reachability, routes it to the owning team and opens the fix pull request.
Check your repos with MergeHarbor