gitcmd

Apr 7, 2026 GO-2025-4261

  GO-2025-4261: Gitea allows attackers to add attachments with forbidden file extensions in code.gitea.io/gitea

Apr 18, 2026 GO-2025-4261

  GO-2025-4261: Gitea allows attackers to add attachments with forbidden file extensions in code.gitea.io/gitea

Changes in this version

+ func ErrorAsStderr(err error) (string, bool)

+ func IsErrorCanceledOrKilled(err error) bool

+ func IsErrorSignalKilled(err error) bool

+ func IsStdErrorNotValidObjectName(err error) bool

+ func StderrHasPrefix(err error, prefix string) bool

+ func UnwrapPipelineError(err error) (error, bool)

type Command

+ func (c *Command) DebugKill()

+ func (c *Command) MakeStderrPipe() (reader PipeReader, closer func())

+ func (c *Command) MakeStdinPipe() (writer PipeWriter, closer func())

+ func (c *Command) MakeStdinStdoutPipe() (stdin PipeWriter, stdout PipeReader, closer func())

+ func (c *Command) MakeStdoutPipe() (reader PipeReader, closer func())

+ func (c *Command) RunWithStderr(ctx context.Context) RunStdError

+ func (c *Command) Start(ctx context.Context) (retErr error)

+ func (c *Command) StartWithStderr(ctx context.Context) RunStdError

+ func (c *Command) Wait() error

+ func (c *Command) WaitWithStderr() RunStdError

+ func (c *Command) WithDir(dir string) *Command

+ func (c *Command) WithEnv(env []string) *Command

+ func (c *Command) WithParentCallerInfo(optInfo ...string) *Command

+ func (c *Command) WithPipelineFunc(f func(ctx Context) error) *Command

+ func (c *Command) WithStdinBytes(stdin []byte) *Command

+ func (c *Command) WithStdinCopy(w io.Reader) *Command

+ func (c *Command) WithStdoutBuffer(w PipeBufferWriter) *Command

+ func (c *Command) WithStdoutCopy(w io.Writer) *Command

+ func (c *Command) WithTimeout(timeout time.Duration) *Command

+ type Context interface

+ CancelPipeline func(err error) error

+ type PipeBufferReader interface

+ Bytes func() []byte

+ Read func(p []byte) (n int, err error)

+ type PipeBufferWriter interface

+ Bytes func() []byte

+ Write func(p []byte) (n int, err error)

+ type PipeReader interface

+ type PipeWriter interface

Apr 8, 2026 GO-2025-4261

  GO-2025-4261: Gitea allows attackers to add attachments with forbidden file extensions in code.gitea.io/gitea

Sep 24, 2025 GO-2025-4261

  GO-2025-4261: Gitea allows attackers to add attachments with forbidden file extensions in code.gitea.io/gitea

Mar 13, 2026 GO-2025-4261

  GO-2025-4261: Gitea allows attackers to add attachments with forbidden file extensions in code.gitea.io/gitea

Jan 22, 2026 GO-2025-4261

  GO-2025-4261: Gitea allows attackers to add attachments with forbidden file extensions in code.gitea.io/gitea

Dec 18, 2025 GO-2025-4261 +9 more

  GO-2025-4261: Gitea allows attackers to add attachments with forbidden file extensions in code.gitea.io/gitea

  GO-2026-4362: Gitea improperly exposes issue and pull request titles in code.gitea.io/gitea

  GO-2026-4363: Gitea does not properly validate repository ownership when deleting Git LFS locks in code.gitea.io/gitea

  GO-2026-4364: Gitea does not properly validate repository ownership when linking attachments to releases in code.gitea.io/gitea

  GO-2026-4365: Gitea may send release notification emails for private repositories to users whose access has been revoked in code.gitea.io/gitea

  GO-2026-4366: Gitea does not properly verify authorization when canceling scheduled auto-merges via the web interface in code.gitea.io/gitea

  GO-2026-4367: Gitea has improper access control for uploaded attachments in code.gitea.io/gitea

  GO-2026-4368: Gitea improperly exposes issue titles and repository names through previously started stopwatches in code.gitea.io/gitea

  GO-2026-4369: Gitea does not properly validate ownership when toggling OpenID URI visibility in code.gitea.io/gitea

  GO-2026-4370: Gitea does not properly validate project ownership in organization project operations in code.gitea.io/gitea

Nov 22, 2025 GO-2025-4261 +9 more

  GO-2025-4261: Gitea allows attackers to add attachments with forbidden file extensions in code.gitea.io/gitea

  GO-2026-4362: Gitea improperly exposes issue and pull request titles in code.gitea.io/gitea

  GO-2026-4363: Gitea does not properly validate repository ownership when deleting Git LFS locks in code.gitea.io/gitea

  GO-2026-4364: Gitea does not properly validate repository ownership when linking attachments to releases in code.gitea.io/gitea

  GO-2026-4365: Gitea may send release notification emails for private repositories to users whose access has been revoked in code.gitea.io/gitea

  GO-2026-4366: Gitea does not properly verify authorization when canceling scheduled auto-merges via the web interface in code.gitea.io/gitea

  GO-2026-4367: Gitea has improper access control for uploaded attachments in code.gitea.io/gitea

  GO-2026-4368: Gitea improperly exposes issue titles and repository names through previously started stopwatches in code.gitea.io/gitea

  GO-2026-4369: Gitea does not properly validate ownership when toggling OpenID URI visibility in code.gitea.io/gitea

  GO-2026-4370: Gitea does not properly validate project ownership in organization project operations in code.gitea.io/gitea

Nov 4, 2025 GO-2025-4258 +11 more

  GO-2025-4258: Gitea mishandles authorization for deletion of releases in code.gitea.io/gitea

  GO-2025-4261: Gitea allows attackers to add attachments with forbidden file extensions in code.gitea.io/gitea

  GO-2026-4274: Gitea's /api/v1/user endpoint has different responses for failed authentication depending on whether a username exists in code.gitea.io/gitea

  GO-2026-4362: Gitea improperly exposes issue and pull request titles in code.gitea.io/gitea

  GO-2026-4363: Gitea does not properly validate repository ownership when deleting Git LFS locks in code.gitea.io/gitea

  GO-2026-4364: Gitea does not properly validate repository ownership when linking attachments to releases in code.gitea.io/gitea

  GO-2026-4365: Gitea may send release notification emails for private repositories to users whose access has been revoked in code.gitea.io/gitea

  GO-2026-4366: Gitea does not properly verify authorization when canceling scheduled auto-merges via the web interface in code.gitea.io/gitea

  GO-2026-4367: Gitea has improper access control for uploaded attachments in code.gitea.io/gitea

  GO-2026-4368: Gitea improperly exposes issue titles and repository names through previously started stopwatches in code.gitea.io/gitea

  GO-2026-4369: Gitea does not properly validate ownership when toggling OpenID URI visibility in code.gitea.io/gitea

  GO-2026-4370: Gitea does not properly validate project ownership in organization project operations in code.gitea.io/gitea

Oct 29, 2025 GO-2025-4258 +11 more

  GO-2025-4258: Gitea mishandles authorization for deletion of releases in code.gitea.io/gitea

  GO-2025-4261: Gitea allows attackers to add attachments with forbidden file extensions in code.gitea.io/gitea

  GO-2026-4274: Gitea's /api/v1/user endpoint has different responses for failed authentication depending on whether a username exists in code.gitea.io/gitea

  GO-2026-4362: Gitea improperly exposes issue and pull request titles in code.gitea.io/gitea

  GO-2026-4363: Gitea does not properly validate repository ownership when deleting Git LFS locks in code.gitea.io/gitea

  GO-2026-4364: Gitea does not properly validate repository ownership when linking attachments to releases in code.gitea.io/gitea

  GO-2026-4365: Gitea may send release notification emails for private repositories to users whose access has been revoked in code.gitea.io/gitea

  GO-2026-4366: Gitea does not properly verify authorization when canceling scheduled auto-merges via the web interface in code.gitea.io/gitea

  GO-2026-4367: Gitea has improper access control for uploaded attachments in code.gitea.io/gitea

  GO-2026-4368: Gitea improperly exposes issue titles and repository names through previously started stopwatches in code.gitea.io/gitea

  GO-2026-4369: Gitea does not properly validate ownership when toggling OpenID URI visibility in code.gitea.io/gitea

  GO-2026-4370: Gitea does not properly validate project ownership in organization project operations in code.gitea.io/gitea

Changes in this version

+ const DefaultLocale

+ var ErrBrokenCommand = errors.New("git command is broken")

+ var GitExecutable = "git"

+ func CommonCmdServEnvs() []string

+ func CommonGitCmdEnvs() []string

+ func ConcatenateError(err error, stderr string) error

+ func HomeDir() string

+ func IsErrorExitCode(err error, code int) bool

+ func SetDefaultCommandExecutionTimeout(timeout time.Duration)

+ func SetExecutablePath(path string) error

+ type Command struct

+ func NewCommand(args ...internal.CmdArg) *Command

+ func (c *Command) AddArguments(args ...internal.CmdArg) *Command

+ func (c *Command) AddConfig(key, value string) *Command

+ func (c *Command) AddDashesAndList(list ...string) *Command

+ func (c *Command) AddDynamicArguments(args ...string) *Command

+ func (c *Command) AddOptionFormat(opt string, args ...any) *Command

+ func (c *Command) AddOptionValues(opt internal.CmdArg, args ...string) *Command

+ func (c *Command) LogString() string

+ func (c *Command) ProcessState() string

+ func (c *Command) Run(ctx context.Context, opts *RunOpts) error

+ func (c *Command) RunStdBytes(ctx context.Context, opts *RunOpts) (stdout, stderr []byte, runErr RunStdError)

+ func (c *Command) RunStdString(ctx context.Context, opts *RunOpts) (stdout, stderr string, runErr RunStdError)

+ type RunOpts struct

+ Dir string

+ Env []string

+ PipelineFunc func(context.Context, context.CancelFunc) error

+ Stderr io.Writer

+ Stdin io.Reader

+ Stdout io.Writer

+ Timeout time.Duration

+ UseContextTimeout bool

+ type RunStdError interface

+ Stderr func() string

+ Unwrap func() error

+ type TrustedCmdArgs []internal.CmdArg

+ func ToTrustedCmdArgs(args []string) TrustedCmdArgs

Sep 25, 2025 GO-2025-4258 +11 more

  GO-2025-4258: Gitea mishandles authorization for deletion of releases in code.gitea.io/gitea

  GO-2025-4261: Gitea allows attackers to add attachments with forbidden file extensions in code.gitea.io/gitea

  GO-2026-4274: Gitea's /api/v1/user endpoint has different responses for failed authentication depending on whether a username exists in code.gitea.io/gitea

  GO-2026-4362: Gitea improperly exposes issue and pull request titles in code.gitea.io/gitea

  GO-2026-4363: Gitea does not properly validate repository ownership when deleting Git LFS locks in code.gitea.io/gitea

  GO-2026-4364: Gitea does not properly validate repository ownership when linking attachments to releases in code.gitea.io/gitea

  GO-2026-4365: Gitea may send release notification emails for private repositories to users whose access has been revoked in code.gitea.io/gitea

  GO-2026-4366: Gitea does not properly verify authorization when canceling scheduled auto-merges via the web interface in code.gitea.io/gitea

  GO-2026-4367: Gitea has improper access control for uploaded attachments in code.gitea.io/gitea

  GO-2026-4368: Gitea improperly exposes issue titles and repository names through previously started stopwatches in code.gitea.io/gitea

  GO-2026-4369: Gitea does not properly validate ownership when toggling OpenID URI visibility in code.gitea.io/gitea

  GO-2026-4370: Gitea does not properly validate project ownership in organization project operations in code.gitea.io/gitea