form package versions - gogs.io/gogs/pkg/form

Versions in this module

v0.11.91

Aug 12, 2019 GO-2022-0369 +23 more

GO-2022-0369: Gogs vulnerable to improper PAM authorization handling in gogs.io/gogs

GO-2022-0377: SSRF in repository migration in gogs.io/gogs

GO-2022-0471: OS Command Injection in gogs in gogs.io/gogs

GO-2022-0473: Cross site scripting via cookies in gogs in gogs.io/gogs

GO-2022-0483: Cross-site Scripting vulnerability in repository issue list in Gogs in gogs.io/gogs

GO-2022-0554: Unrestricted Upload of File with Dangerous Type in Gogs in gogs.io/gogs

GO-2022-0556: OS Command Injection in file editor in Gogs in gogs.io/gogs

GO-2022-0562: Path Traversal in Git HTTP endpoints in Gogs in gogs.io/gogs

GO-2022-0566: SSRF in repository migration in gogs.io/gogs

GO-2022-0570: Path Traversal in file editor on Windows in Gogs in gogs.io/gogs

GO-2022-0583: Server-Side Request Forgery in gogs webhook in gogs.io/gogs

GO-2022-0597: Cross-site Scripting in Gogs in gogs.io/gogs

GO-2022-0749: OS Command Injection in gogs in gogs.io/gogs

GO-2022-0788: Insecure Permissions in Gogs in gogs.io/gogs

GO-2022-0822: Open Redirect in gogs.io/gogs

GO-2022-1060: Gogs vulnerable to Cross-site Scripting in gogs.io/gogs

GO-2023-1596: Gogs OS Command Injection vulnerability in gogs.io/gogs

GO-2023-1971: Gogs and Gitea SSRF Vulnerability in code.gitea.io/gitea

GO-2023-1972: Gogs XSS Vulnerability in gogs.io/gogs

GO-2024-3275: Unpatched Remote Code Execution in Gogs in gogs.io/gogs

GO-2024-3355: Remote Command Execution in file editing in gogs in gogs.io/gogs

GO-2024-3356: Path Traversal in file update API in gogs in gogs.io/gogs

GO-2025-3776: Gogs allows deletion of internal files which leads to remote command execution in gogs.io/gogs

GO-2025-3778: Gogs XSS allowed by stored call in PDF renderer in gogs.io/gogs

v0.11.86

Jan 31, 2019 GO-2022-0369 +24 more

GO-2022-0369: Gogs vulnerable to improper PAM authorization handling in gogs.io/gogs

GO-2022-0377: SSRF in repository migration in gogs.io/gogs

GO-2022-0471: OS Command Injection in gogs in gogs.io/gogs

GO-2022-0473: Cross site scripting via cookies in gogs in gogs.io/gogs

GO-2022-0483: Cross-site Scripting vulnerability in repository issue list in Gogs in gogs.io/gogs

GO-2022-0554: Unrestricted Upload of File with Dangerous Type in Gogs in gogs.io/gogs

GO-2022-0556: OS Command Injection in file editor in Gogs in gogs.io/gogs

GO-2022-0562: Path Traversal in Git HTTP endpoints in Gogs in gogs.io/gogs

GO-2022-0566: SSRF in repository migration in gogs.io/gogs

GO-2022-0570: Path Traversal in file editor on Windows in Gogs in gogs.io/gogs

GO-2022-0583: Server-Side Request Forgery in gogs webhook in gogs.io/gogs

GO-2022-0597: Cross-site Scripting in Gogs in gogs.io/gogs

GO-2022-0749: OS Command Injection in gogs in gogs.io/gogs

GO-2022-0788: Insecure Permissions in Gogs in gogs.io/gogs

GO-2022-0797: Insecure Permissions in Gogs in gogs.io/gogs

GO-2022-0822: Open Redirect in gogs.io/gogs

GO-2022-1060: Gogs vulnerable to Cross-site Scripting in gogs.io/gogs

GO-2023-1596: Gogs OS Command Injection vulnerability in gogs.io/gogs

GO-2023-1971: Gogs and Gitea SSRF Vulnerability in code.gitea.io/gitea

GO-2023-1972: Gogs XSS Vulnerability in gogs.io/gogs

GO-2024-3275: Unpatched Remote Code Execution in Gogs in gogs.io/gogs

GO-2024-3355: Remote Command Execution in file editing in gogs in gogs.io/gogs

GO-2024-3356: Path Traversal in file update API in gogs in gogs.io/gogs

GO-2025-3776: Gogs allows deletion of internal files which leads to remote command execution in gogs.io/gogs

GO-2025-3778: Gogs XSS allowed by stored call in PDF renderer in gogs.io/gogs

Changes in this version

type Authentication

+ GitHubAPIEndpoint string

v0.11.79

Dec 12, 2018 GO-2022-0369 +24 more

GO-2022-0369: Gogs vulnerable to improper PAM authorization handling in gogs.io/gogs

GO-2022-0377: SSRF in repository migration in gogs.io/gogs

GO-2022-0471: OS Command Injection in gogs in gogs.io/gogs

GO-2022-0473: Cross site scripting via cookies in gogs in gogs.io/gogs

GO-2022-0483: Cross-site Scripting vulnerability in repository issue list in Gogs in gogs.io/gogs

GO-2022-0554: Unrestricted Upload of File with Dangerous Type in Gogs in gogs.io/gogs

GO-2022-0556: OS Command Injection in file editor in Gogs in gogs.io/gogs

GO-2022-0562: Path Traversal in Git HTTP endpoints in Gogs in gogs.io/gogs

GO-2022-0566: SSRF in repository migration in gogs.io/gogs

GO-2022-0570: Path Traversal in file editor on Windows in Gogs in gogs.io/gogs

GO-2022-0583: Server-Side Request Forgery in gogs webhook in gogs.io/gogs

GO-2022-0597: Cross-site Scripting in Gogs in gogs.io/gogs

GO-2022-0749: OS Command Injection in gogs in gogs.io/gogs

GO-2022-0788: Insecure Permissions in Gogs in gogs.io/gogs

GO-2022-0797: Insecure Permissions in Gogs in gogs.io/gogs

GO-2022-0822: Open Redirect in gogs.io/gogs

GO-2022-1060: Gogs vulnerable to Cross-site Scripting in gogs.io/gogs

GO-2023-1596: Gogs OS Command Injection vulnerability in gogs.io/gogs

GO-2023-1971: Gogs and Gitea SSRF Vulnerability in code.gitea.io/gitea

GO-2023-1972: Gogs XSS Vulnerability in gogs.io/gogs

GO-2024-3275: Unpatched Remote Code Execution in Gogs in gogs.io/gogs

GO-2024-3355: Remote Command Execution in file editing in gogs in gogs.io/gogs

GO-2024-3356: Path Traversal in file update API in gogs in gogs.io/gogs

GO-2025-3776: Gogs allows deletion of internal files which leads to remote command execution in gogs.io/gogs

GO-2025-3778: Gogs XSS allowed by stored call in PDF renderer in gogs.io/gogs

v0.11.66

Sep 16, 2018 GO-2022-0369 +24 more

GO-2022-0369: Gogs vulnerable to improper PAM authorization handling in gogs.io/gogs

GO-2022-0377: SSRF in repository migration in gogs.io/gogs

GO-2022-0471: OS Command Injection in gogs in gogs.io/gogs

GO-2022-0473: Cross site scripting via cookies in gogs in gogs.io/gogs

GO-2022-0483: Cross-site Scripting vulnerability in repository issue list in Gogs in gogs.io/gogs

GO-2022-0554: Unrestricted Upload of File with Dangerous Type in Gogs in gogs.io/gogs

GO-2022-0556: OS Command Injection in file editor in Gogs in gogs.io/gogs

GO-2022-0562: Path Traversal in Git HTTP endpoints in Gogs in gogs.io/gogs

GO-2022-0566: SSRF in repository migration in gogs.io/gogs

GO-2022-0570: Path Traversal in file editor on Windows in Gogs in gogs.io/gogs

GO-2022-0583: Server-Side Request Forgery in gogs webhook in gogs.io/gogs

GO-2022-0597: Cross-site Scripting in Gogs in gogs.io/gogs

GO-2022-0749: OS Command Injection in gogs in gogs.io/gogs

GO-2022-0788: Insecure Permissions in Gogs in gogs.io/gogs

GO-2022-0797: Insecure Permissions in Gogs in gogs.io/gogs

GO-2022-0822: Open Redirect in gogs.io/gogs

GO-2022-1060: Gogs vulnerable to Cross-site Scripting in gogs.io/gogs

GO-2023-1596: Gogs OS Command Injection vulnerability in gogs.io/gogs

GO-2023-1971: Gogs and Gitea SSRF Vulnerability in code.gitea.io/gitea

GO-2023-1972: Gogs XSS Vulnerability in gogs.io/gogs

GO-2024-3275: Unpatched Remote Code Execution in Gogs in gogs.io/gogs

GO-2024-3355: Remote Command Execution in file editing in gogs in gogs.io/gogs

GO-2024-3356: Path Traversal in file update API in gogs in gogs.io/gogs

GO-2025-3776: Gogs allows deletion of internal files which leads to remote command execution in gogs.io/gogs

GO-2025-3778: Gogs XSS allowed by stored call in PDF renderer in gogs.io/gogs

Changes in this version

type Authentication

+ IsDefault bool

v0.11.53

Jun 4, 2018 GO-2022-0369 +24 more

GO-2022-0369: Gogs vulnerable to improper PAM authorization handling in gogs.io/gogs

GO-2022-0377: SSRF in repository migration in gogs.io/gogs

GO-2022-0471: OS Command Injection in gogs in gogs.io/gogs

GO-2022-0473: Cross site scripting via cookies in gogs in gogs.io/gogs

GO-2022-0483: Cross-site Scripting vulnerability in repository issue list in Gogs in gogs.io/gogs

GO-2022-0554: Unrestricted Upload of File with Dangerous Type in Gogs in gogs.io/gogs

GO-2022-0556: OS Command Injection in file editor in Gogs in gogs.io/gogs

GO-2022-0562: Path Traversal in Git HTTP endpoints in Gogs in gogs.io/gogs

GO-2022-0566: SSRF in repository migration in gogs.io/gogs

GO-2022-0570: Path Traversal in file editor on Windows in Gogs in gogs.io/gogs

GO-2022-0583: Server-Side Request Forgery in gogs webhook in gogs.io/gogs

GO-2022-0597: Cross-site Scripting in Gogs in gogs.io/gogs

GO-2022-0749: OS Command Injection in gogs in gogs.io/gogs

GO-2022-0788: Insecure Permissions in Gogs in gogs.io/gogs

GO-2022-0797: Insecure Permissions in Gogs in gogs.io/gogs

GO-2022-0822: Open Redirect in gogs.io/gogs

GO-2022-1060: Gogs vulnerable to Cross-site Scripting in gogs.io/gogs

GO-2023-1596: Gogs OS Command Injection vulnerability in gogs.io/gogs

GO-2023-1971: Gogs and Gitea SSRF Vulnerability in code.gitea.io/gitea

GO-2023-1972: Gogs XSS Vulnerability in gogs.io/gogs

GO-2024-3275: Unpatched Remote Code Execution in Gogs in gogs.io/gogs

GO-2024-3355: Remote Command Execution in file editing in gogs in gogs.io/gogs

GO-2024-3356: Path Traversal in file update API in gogs in gogs.io/gogs

GO-2025-3776: Gogs allows deletion of internal files which leads to remote command execution in gogs.io/gogs

GO-2025-3778: Gogs XSS allowed by stored call in PDF renderer in gogs.io/gogs

Changes in this version

type SignIn

+ LoginSource int64

v0.11.43

Mar 31, 2018 GO-2022-0369 +24 more

GO-2022-0369: Gogs vulnerable to improper PAM authorization handling in gogs.io/gogs

GO-2022-0377: SSRF in repository migration in gogs.io/gogs

GO-2022-0471: OS Command Injection in gogs in gogs.io/gogs

GO-2022-0473: Cross site scripting via cookies in gogs in gogs.io/gogs

GO-2022-0483: Cross-site Scripting vulnerability in repository issue list in Gogs in gogs.io/gogs

GO-2022-0554: Unrestricted Upload of File with Dangerous Type in Gogs in gogs.io/gogs

GO-2022-0556: OS Command Injection in file editor in Gogs in gogs.io/gogs

GO-2022-0562: Path Traversal in Git HTTP endpoints in Gogs in gogs.io/gogs

GO-2022-0566: SSRF in repository migration in gogs.io/gogs

GO-2022-0570: Path Traversal in file editor on Windows in Gogs in gogs.io/gogs

GO-2022-0583: Server-Side Request Forgery in gogs webhook in gogs.io/gogs

GO-2022-0597: Cross-site Scripting in Gogs in gogs.io/gogs

GO-2022-0749: OS Command Injection in gogs in gogs.io/gogs

GO-2022-0788: Insecure Permissions in Gogs in gogs.io/gogs

GO-2022-0797: Insecure Permissions in Gogs in gogs.io/gogs

GO-2022-0822: Open Redirect in gogs.io/gogs

GO-2022-1060: Gogs vulnerable to Cross-site Scripting in gogs.io/gogs

GO-2023-1596: Gogs OS Command Injection vulnerability in gogs.io/gogs

GO-2023-1971: Gogs and Gitea SSRF Vulnerability in code.gitea.io/gitea

GO-2023-1972: Gogs XSS Vulnerability in gogs.io/gogs

GO-2024-3275: Unpatched Remote Code Execution in Gogs in gogs.io/gogs

GO-2024-3355: Remote Command Execution in file editing in gogs in gogs.io/gogs

GO-2024-3356: Path Traversal in file update API in gogs in gogs.io/gogs

GO-2025-3776: Gogs allows deletion of internal files which leads to remote command execution in gogs.io/gogs

GO-2025-3778: Gogs XSS allowed by stored call in PDF renderer in gogs.io/gogs

v0.11.34

Nov 22, 2017 GO-2022-0369 +24 more

GO-2022-0369: Gogs vulnerable to improper PAM authorization handling in gogs.io/gogs

GO-2022-0377: SSRF in repository migration in gogs.io/gogs

GO-2022-0471: OS Command Injection in gogs in gogs.io/gogs

GO-2022-0473: Cross site scripting via cookies in gogs in gogs.io/gogs

GO-2022-0483: Cross-site Scripting vulnerability in repository issue list in Gogs in gogs.io/gogs

GO-2022-0554: Unrestricted Upload of File with Dangerous Type in Gogs in gogs.io/gogs

GO-2022-0556: OS Command Injection in file editor in Gogs in gogs.io/gogs

GO-2022-0562: Path Traversal in Git HTTP endpoints in Gogs in gogs.io/gogs

GO-2022-0566: SSRF in repository migration in gogs.io/gogs

GO-2022-0570: Path Traversal in file editor on Windows in Gogs in gogs.io/gogs

GO-2022-0583: Server-Side Request Forgery in gogs webhook in gogs.io/gogs

GO-2022-0597: Cross-site Scripting in Gogs in gogs.io/gogs

GO-2022-0749: OS Command Injection in gogs in gogs.io/gogs

GO-2022-0788: Insecure Permissions in Gogs in gogs.io/gogs

GO-2022-0797: Insecure Permissions in Gogs in gogs.io/gogs

GO-2022-0822: Open Redirect in gogs.io/gogs

GO-2022-1060: Gogs vulnerable to Cross-site Scripting in gogs.io/gogs

GO-2023-1596: Gogs OS Command Injection vulnerability in gogs.io/gogs

GO-2023-1971: Gogs and Gitea SSRF Vulnerability in code.gitea.io/gitea

GO-2023-1972: Gogs XSS Vulnerability in gogs.io/gogs

GO-2024-3275: Unpatched Remote Code Execution in Gogs in gogs.io/gogs

GO-2024-3355: Remote Command Execution in file editing in gogs in gogs.io/gogs

GO-2024-3356: Path Traversal in file update API in gogs in gogs.io/gogs

GO-2025-3776: Gogs allows deletion of internal files which leads to remote command execution in gogs.io/gogs

GO-2025-3778: Gogs XSS allowed by stored call in PDF renderer in gogs.io/gogs

v0.11.33

Nov 19, 2017 GO-2022-0369 +24 more

GO-2022-0369: Gogs vulnerable to improper PAM authorization handling in gogs.io/gogs

GO-2022-0377: SSRF in repository migration in gogs.io/gogs

GO-2022-0471: OS Command Injection in gogs in gogs.io/gogs

GO-2022-0473: Cross site scripting via cookies in gogs in gogs.io/gogs

GO-2022-0483: Cross-site Scripting vulnerability in repository issue list in Gogs in gogs.io/gogs

GO-2022-0554: Unrestricted Upload of File with Dangerous Type in Gogs in gogs.io/gogs

GO-2022-0556: OS Command Injection in file editor in Gogs in gogs.io/gogs

GO-2022-0562: Path Traversal in Git HTTP endpoints in Gogs in gogs.io/gogs

GO-2022-0566: SSRF in repository migration in gogs.io/gogs

GO-2022-0570: Path Traversal in file editor on Windows in Gogs in gogs.io/gogs

GO-2022-0583: Server-Side Request Forgery in gogs webhook in gogs.io/gogs

GO-2022-0597: Cross-site Scripting in Gogs in gogs.io/gogs

GO-2022-0749: OS Command Injection in gogs in gogs.io/gogs

GO-2022-0788: Insecure Permissions in Gogs in gogs.io/gogs

GO-2022-0797: Insecure Permissions in Gogs in gogs.io/gogs

GO-2022-0822: Open Redirect in gogs.io/gogs

GO-2022-1060: Gogs vulnerable to Cross-site Scripting in gogs.io/gogs

GO-2023-1596: Gogs OS Command Injection vulnerability in gogs.io/gogs

GO-2023-1971: Gogs and Gitea SSRF Vulnerability in code.gitea.io/gitea

GO-2023-1972: Gogs XSS Vulnerability in gogs.io/gogs

GO-2024-3275: Unpatched Remote Code Execution in Gogs in gogs.io/gogs

GO-2024-3355: Remote Command Execution in file editing in gogs in gogs.io/gogs

GO-2024-3356: Path Traversal in file update API in gogs in gogs.io/gogs

GO-2025-3776: Gogs allows deletion of internal files which leads to remote command execution in gogs.io/gogs

GO-2025-3778: Gogs XSS allowed by stored call in PDF renderer in gogs.io/gogs

Changes in this version

+ type NewDingtalkHook struct

+ PayloadURL string

+ func (f *NewDingtalkHook) Validate(ctx *macaron.Context, errs binding.Errors) binding.Errors

type RepoSetting

+ PullsAllowRebase bool

+ PullsIgnoreWhitespace bool

v0.11.29

Aug 15, 2017 GO-2022-0369 +24 more

GO-2022-0369: Gogs vulnerable to improper PAM authorization handling in gogs.io/gogs

GO-2022-0377: SSRF in repository migration in gogs.io/gogs

GO-2022-0471: OS Command Injection in gogs in gogs.io/gogs

GO-2022-0473: Cross site scripting via cookies in gogs in gogs.io/gogs

GO-2022-0483: Cross-site Scripting vulnerability in repository issue list in Gogs in gogs.io/gogs

GO-2022-0554: Unrestricted Upload of File with Dangerous Type in Gogs in gogs.io/gogs

GO-2022-0556: OS Command Injection in file editor in Gogs in gogs.io/gogs

GO-2022-0562: Path Traversal in Git HTTP endpoints in Gogs in gogs.io/gogs

GO-2022-0566: SSRF in repository migration in gogs.io/gogs

GO-2022-0570: Path Traversal in file editor on Windows in Gogs in gogs.io/gogs

GO-2022-0583: Server-Side Request Forgery in gogs webhook in gogs.io/gogs

GO-2022-0597: Cross-site Scripting in Gogs in gogs.io/gogs

GO-2022-0749: OS Command Injection in gogs in gogs.io/gogs

GO-2022-0788: Insecure Permissions in Gogs in gogs.io/gogs

GO-2022-0797: Insecure Permissions in Gogs in gogs.io/gogs

GO-2022-0822: Open Redirect in gogs.io/gogs

GO-2022-1060: Gogs vulnerable to Cross-site Scripting in gogs.io/gogs

GO-2023-1596: Gogs OS Command Injection vulnerability in gogs.io/gogs

GO-2023-1971: Gogs and Gitea SSRF Vulnerability in code.gitea.io/gitea

GO-2023-1972: Gogs XSS Vulnerability in gogs.io/gogs

GO-2024-3275: Unpatched Remote Code Execution in Gogs in gogs.io/gogs

GO-2024-3355: Remote Command Execution in file editing in gogs in gogs.io/gogs

GO-2024-3356: Path Traversal in file update API in gogs in gogs.io/gogs

GO-2025-3776: Gogs allows deletion of internal files which leads to remote command execution in gogs.io/gogs

GO-2025-3778: Gogs XSS allowed by stored call in PDF renderer in gogs.io/gogs

v0.11.19

Jun 10, 2017 GO-2022-0369 +24 more

GO-2022-0369: Gogs vulnerable to improper PAM authorization handling in gogs.io/gogs

GO-2022-0377: SSRF in repository migration in gogs.io/gogs

GO-2022-0471: OS Command Injection in gogs in gogs.io/gogs

GO-2022-0473: Cross site scripting via cookies in gogs in gogs.io/gogs

GO-2022-0483: Cross-site Scripting vulnerability in repository issue list in Gogs in gogs.io/gogs

GO-2022-0554: Unrestricted Upload of File with Dangerous Type in Gogs in gogs.io/gogs

GO-2022-0556: OS Command Injection in file editor in Gogs in gogs.io/gogs

GO-2022-0562: Path Traversal in Git HTTP endpoints in Gogs in gogs.io/gogs

GO-2022-0566: SSRF in repository migration in gogs.io/gogs

GO-2022-0570: Path Traversal in file editor on Windows in Gogs in gogs.io/gogs

GO-2022-0583: Server-Side Request Forgery in gogs webhook in gogs.io/gogs

GO-2022-0597: Cross-site Scripting in Gogs in gogs.io/gogs

GO-2022-0749: OS Command Injection in gogs in gogs.io/gogs

GO-2022-0788: Insecure Permissions in Gogs in gogs.io/gogs

GO-2022-0797: Insecure Permissions in Gogs in gogs.io/gogs

GO-2022-0822: Open Redirect in gogs.io/gogs

GO-2022-1060: Gogs vulnerable to Cross-site Scripting in gogs.io/gogs

GO-2023-1596: Gogs OS Command Injection vulnerability in gogs.io/gogs

GO-2023-1971: Gogs and Gitea SSRF Vulnerability in code.gitea.io/gitea

GO-2023-1972: Gogs XSS Vulnerability in gogs.io/gogs

GO-2024-3275: Unpatched Remote Code Execution in Gogs in gogs.io/gogs

GO-2024-3355: Remote Command Execution in file editing in gogs in gogs.io/gogs

GO-2024-3356: Path Traversal in file update API in gogs in gogs.io/gogs

GO-2025-3776: Gogs allows deletion of internal files which leads to remote command execution in gogs.io/gogs

GO-2025-3778: Gogs XSS allowed by stored call in PDF renderer in gogs.io/gogs

Changes in this version

type Authentication

+ GroupDN string

+ GroupEnabled bool

+ GroupFilter string

+ GroupMemberUID string

+ UserUID string

v0.11.4

Apr 5, 2017 GO-2022-0369 +24 more

GO-2022-0369: Gogs vulnerable to improper PAM authorization handling in gogs.io/gogs

GO-2022-0377: SSRF in repository migration in gogs.io/gogs

GO-2022-0471: OS Command Injection in gogs in gogs.io/gogs

GO-2022-0473: Cross site scripting via cookies in gogs in gogs.io/gogs

GO-2022-0483: Cross-site Scripting vulnerability in repository issue list in Gogs in gogs.io/gogs

GO-2022-0554: Unrestricted Upload of File with Dangerous Type in Gogs in gogs.io/gogs

GO-2022-0556: OS Command Injection in file editor in Gogs in gogs.io/gogs

GO-2022-0562: Path Traversal in Git HTTP endpoints in Gogs in gogs.io/gogs

GO-2022-0566: SSRF in repository migration in gogs.io/gogs

GO-2022-0570: Path Traversal in file editor on Windows in Gogs in gogs.io/gogs

GO-2022-0583: Server-Side Request Forgery in gogs webhook in gogs.io/gogs

GO-2022-0597: Cross-site Scripting in Gogs in gogs.io/gogs

GO-2022-0749: OS Command Injection in gogs in gogs.io/gogs

GO-2022-0788: Insecure Permissions in Gogs in gogs.io/gogs

GO-2022-0797: Insecure Permissions in Gogs in gogs.io/gogs

GO-2022-0822: Open Redirect in gogs.io/gogs

GO-2022-1060: Gogs vulnerable to Cross-site Scripting in gogs.io/gogs

GO-2023-1596: Gogs OS Command Injection vulnerability in gogs.io/gogs

GO-2023-1971: Gogs and Gitea SSRF Vulnerability in code.gitea.io/gitea

GO-2023-1972: Gogs XSS Vulnerability in gogs.io/gogs

GO-2024-3275: Unpatched Remote Code Execution in Gogs in gogs.io/gogs

GO-2024-3355: Remote Command Execution in file editing in gogs in gogs.io/gogs

GO-2024-3356: Path Traversal in file update API in gogs in gogs.io/gogs

GO-2025-3776: Gogs allows deletion of internal files which leads to remote command execution in gogs.io/gogs

GO-2025-3778: Gogs XSS allowed by stored call in PDF renderer in gogs.io/gogs

Changes in this version

+ const AVATAR_BYMAIL

+ const AVATAR_LOCAL

+ const ERR_ALPHA_DASH_DOT_SLASH

+ var AlphaDashDotSlashPattern = regexp.MustCompile("[^\\d\\w-_\\./]")

+ func Assign(form interface{}, data map[string]interface{})

+ type AddEmail struct

+ Email string

+ func (f *AddEmail) Validate(ctx *macaron.Context, errs binding.Errors) binding.Errors

+ type AddSSHKey struct

+ Content string

+ Title string

+ func (f *AddSSHKey) Validate(ctx *macaron.Context, errs binding.Errors) binding.Errors

+ type AdminCrateUser struct

+ Email string

+ LoginName string

+ LoginType string

+ Password string

+ SendNotify bool

+ UserName string

+ func (f *AdminCrateUser) Validate(ctx *macaron.Context, errs binding.Errors) binding.Errors

+ type AdminEditUser struct

+ Active bool

+ Admin bool

+ AllowGitHook bool

+ AllowImportLocal bool

+ Email string

+ FullName string

+ Location string

+ LoginName string

+ LoginType string

+ MaxRepoCreation int

+ Password string

+ ProhibitLogin bool

+ Website string

+ func (f *AdminEditUser) Validate(ctx *macaron.Context, errs binding.Errors) binding.Errors

+ type Authentication struct

+ AdminFilter string

+ AllowedDomains string

+ AttributeMail string

+ AttributeName string

+ AttributeSurname string

+ AttributeUsername string

+ AttributesInBind bool

+ BindDN string

+ BindPassword string

+ Filter string

+ Host string

+ ID int64

+ IsActive bool

+ Name string

+ PAMServiceName string

+ Port int

+ SMTPAuth string

+ SMTPHost string

+ SMTPPort int

+ SecurityProtocol int

+ SkipVerify bool

+ TLS bool

+ Type int

+ UserBase string

+ UserDN string

+ func (f *Authentication) Validate(ctx *macaron.Context, errs binding.Errors) binding.Errors

+ type Avatar struct

+ Avatar *multipart.FileHeader

+ Federavatar bool

+ Gravatar string

+ Source string

+ func (f *Avatar) Validate(ctx *macaron.Context, errs binding.Errors) binding.Errors

+ type ChangePassword struct

+ OldPassword string

+ Password string

+ Retype string

+ func (f *ChangePassword) Validate(ctx *macaron.Context, errs binding.Errors) binding.Errors

+ type CreateComment struct

+ Content string

+ Files []string

+ Status string

+ func (f *CreateComment) Validate(ctx *macaron.Context, errs binding.Errors) binding.Errors

+ type CreateLabel struct

+ Color string

+ ID int64

+ Title string

+ func (f *CreateLabel) Validate(ctx *macaron.Context, errs binding.Errors) binding.Errors

+ type CreateMilestone struct

+ Content string

+ Deadline string

+ Title string

+ func (f *CreateMilestone) Validate(ctx *macaron.Context, errs binding.Errors) binding.Errors

+ type CreateOrg struct

+ OrgName string

+ func (f *CreateOrg) Validate(ctx *macaron.Context, errs binding.Errors) binding.Errors

+ type CreateRepo struct

+ AutoInit bool

+ Description string

+ Gitignores string

+ License string

+ Private bool

+ Readme string

+ RepoName string

+ UserID int64

+ func (f *CreateRepo) Validate(ctx *macaron.Context, errs binding.Errors) binding.Errors

+ type CreateTeam struct

+ Description string

+ Permission string

+ TeamName string

+ func (f *CreateTeam) Validate(ctx *macaron.Context, errs binding.Errors) binding.Errors

+ type DeleteRepoFile struct

+ CommitChoice string

+ CommitMessage string

+ CommitSummary string

+ NewBranchName string

+ func (f *DeleteRepoFile) IsNewBrnach() bool

+ func (f *DeleteRepoFile) Validate(ctx *macaron.Context, errs binding.Errors) binding.Errors

+ type EditPreviewDiff struct

+ Content string

+ func (f *EditPreviewDiff) Validate(ctx *macaron.Context, errs binding.Errors) binding.Errors

+ type EditRelease struct

+ Content string

+ Draft string

+ Files []string

+ Prerelease bool

+ Title string

+ func (f *EditRelease) Validate(ctx *macaron.Context, errs binding.Errors) binding.Errors

+ type EditRepoFile struct

+ CommitChoice string

+ CommitMessage string

+ CommitSummary string

+ Content string

+ LastCommit string

+ NewBranchName string

+ TreePath string

+ func (f *EditRepoFile) IsNewBrnach() bool

+ func (f *EditRepoFile) Validate(ctx *macaron.Context, errs binding.Errors) binding.Errors

+ type Form interface

+ type InitializeLabels struct

+ TemplateName string

+ func (f *InitializeLabels) Validate(ctx *macaron.Context, errs binding.Errors) binding.Errors

+ type Install struct

+ AdminConfirmPasswd string

+ AdminEmail string

+ AdminName string

+ AdminPasswd string

+ AppName string

+ AppUrl string

+ DbHost string

+ DbName string

+ DbPasswd string

+ DbPath string

+ DbType string

+ DbUser string

+ DisableGravatar bool

+ DisableRegistration bool

+ Domain string

+ EnableCaptcha bool

+ EnableConsoleMode bool

+ EnableFederatedAvatar bool

+ HTTPPort string

+ LogRootPath string

+ MailNotify bool

+ OfflineMode bool

+ RegisterConfirm bool

+ RepoRootPath string

+ RequireSignInView bool

+ RunUser string

+ SMTPFrom string

+ SMTPHost string

+ SMTPPasswd string

+ SMTPUser string

+ SSHPort int

+ SSLMode string

+ UseBuiltinSSHServer bool

+ func (f *Install) Validate(ctx *macaron.Context, errs binding.Errors) binding.Errors

+ type MigrateRepo struct

+ AuthPassword string

+ AuthUsername string

+ CloneAddr string

+ Description string

+ Mirror bool

+ Private bool

+ RepoName string

+ Uid int64

+ func (f *MigrateRepo) Validate(ctx *macaron.Context, errs binding.Errors) binding.Errors

+ func (f MigrateRepo) ParseRemoteAddr(user *models.User) (string, error)

+ type NewAccessToken struct

+ Name string

+ func (f *NewAccessToken) Validate(ctx *macaron.Context, errs binding.Errors) binding.Errors

+ type NewDiscordHook struct

+ Color string

+ IconURL string

+ PayloadURL string

+ Username string

+ func (f *NewDiscordHook) Validate(ctx *macaron.Context, errs binding.Errors) binding.Errors

+ type NewIssue struct

+ AssigneeID int64

+ Content string

+ Files []string

+ LabelIDs string

+ MilestoneID int64

+ Title string

+ func (f *NewIssue) Validate(ctx *macaron.Context, errs binding.Errors) binding.Errors

+ type NewRelease struct

+ Content string

+ Draft string

+ Files []string

+ Prerelease bool

+ TagName string

+ Target string

+ Title string

+ func (f *NewRelease) Validate(ctx *macaron.Context, errs binding.Errors) binding.Errors

+ type NewSlackHook struct

+ Channel string

+ Color string

+ IconURL string

+ PayloadURL string

+ Username string

+ func (f *NewSlackHook) Validate(ctx *macaron.Context, errs binding.Errors) binding.Errors

+ type NewWebhook struct

+ ContentType int

+ PayloadURL string

+ Secret string

+ func (f *NewWebhook) Validate(ctx *macaron.Context, errs binding.Errors) binding.Errors

+ type NewWiki struct

+ Content string

+ Message string

+ OldTitle string

+ Title string

+ func (f *NewWiki) Validate(ctx *macaron.Context, errs binding.Errors) binding.Errors

+ type ProtectBranch struct

+ EnableWhitelist bool

+ Protected bool

+ RequirePullRequest bool

+ WhitelistTeams string

+ WhitelistUsers string

+ func (f *ProtectBranch) Validate(ctx *macaron.Context, errs binding.Errors) binding.Errors

+ type Register struct

+ Email string

+ Password string

+ Retype string

+ UserName string

+ func (f *Register) Validate(ctx *macaron.Context, errs binding.Errors) binding.Errors

+ type RemoveUploadFile struct

+ File string

+ func (f *RemoveUploadFile) Validate(ctx *macaron.Context, errs binding.Errors) binding.Errors

+ type RepoSetting struct

+ AllowPublicIssues bool

+ AllowPublicWiki bool

+ Branch string

+ Description string

+ EnableExternalTracker bool

+ EnableExternalWiki bool

+ EnableIssues bool

+ EnablePrune bool

+ EnablePulls bool

+ EnableWiki bool

+ ExternalTrackerURL string

+ ExternalWikiURL string

+ Interval int

+ MirrorAddress string

+ Private bool

+ RepoName string

+ TrackerIssueStyle string

+ TrackerURLFormat string

+ Website string

+ func (f *RepoSetting) Validate(ctx *macaron.Context, errs binding.Errors) binding.Errors

+ type SignIn struct

+ Password string

+ Remember bool

+ UserName string

+ func (f *SignIn) Validate(ctx *macaron.Context, errs binding.Errors) binding.Errors

+ type UpdateOrgSetting struct

+ Description string

+ FullName string

+ Location string

+ MaxRepoCreation int

+ Name string

+ Website string

+ func (f *UpdateOrgSetting) Validate(ctx *macaron.Context, errs binding.Errors) binding.Errors

+ type UpdateProfile struct

+ Email string

+ FullName string

+ Location string

+ Name string

+ Website string

+ func (f *UpdateProfile) Validate(ctx *macaron.Context, errs binding.Errors) binding.Errors

+ type UploadRepoFile struct

+ CommitChoice string

+ CommitMessage string

+ CommitSummary string

+ Files []string

+ NewBranchName string

+ TreePath string

+ func (f *UploadRepoFile) IsNewBrnach() bool

+ func (f *UploadRepoFile) Validate(ctx *macaron.Context, errs binding.Errors) binding.Errors

+ type Webhook struct

+ Active bool

+ Create bool

+ Delete bool

+ Events string

+ Fork bool

+ IssueComment bool

+ Issues bool

+ PullRequest bool

+ Push bool

+ Release bool

+ func (f Webhook) ChooseEvents() bool

+ func (f Webhook) PushOnly() bool

+ func (f Webhook) SendEverything() bool

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL