gogs

Jun 8, 2025 GO-2022-1060 +1 more

  GO-2022-1060: Gogs vulnerable to Cross-site Scripting in gogs.io/gogs

  GO-2024-3275: Unpatched Remote Code Execution in Gogs in gogs.io/gogs

Jun 8, 2025 GO-2022-1060 +2 more

  GO-2022-1060: Gogs vulnerable to Cross-site Scripting in gogs.io/gogs

  GO-2024-3275: Unpatched Remote Code Execution in Gogs in gogs.io/gogs

  GO-2025-3776: Gogs allows deletion of internal files which leads to remote command execution in gogs.io/gogs

Dec 23, 2024 GO-2022-1060 +3 more

  GO-2022-1060: Gogs vulnerable to Cross-site Scripting in gogs.io/gogs

  GO-2024-3275: Unpatched Remote Code Execution in Gogs in gogs.io/gogs

  GO-2025-3776: Gogs allows deletion of internal files which leads to remote command execution in gogs.io/gogs

  GO-2025-3778: Gogs XSS allowed by stored call in PDF renderer in gogs.io/gogs

Dec 23, 2024 GO-2022-1060 +3 more

  GO-2022-1060: Gogs vulnerable to Cross-site Scripting in gogs.io/gogs

  GO-2024-3275: Unpatched Remote Code Execution in Gogs in gogs.io/gogs

  GO-2025-3776: Gogs allows deletion of internal files which leads to remote command execution in gogs.io/gogs

  GO-2025-3778: Gogs XSS allowed by stored call in PDF renderer in gogs.io/gogs

Dec 22, 2024 GO-2022-1060 +3 more

  GO-2022-1060: Gogs vulnerable to Cross-site Scripting in gogs.io/gogs

  GO-2024-3275: Unpatched Remote Code Execution in Gogs in gogs.io/gogs

  GO-2025-3776: Gogs allows deletion of internal files which leads to remote command execution in gogs.io/gogs

  GO-2025-3778: Gogs XSS allowed by stored call in PDF renderer in gogs.io/gogs

Dec 22, 2024 GO-2022-1060 +5 more

  GO-2022-1060: Gogs vulnerable to Cross-site Scripting in gogs.io/gogs

  GO-2024-3275: Unpatched Remote Code Execution in Gogs in gogs.io/gogs

  GO-2024-3355: Remote Command Execution in file editing in gogs in gogs.io/gogs

  GO-2024-3356: Path Traversal in file update API in gogs in gogs.io/gogs

  GO-2025-3776: Gogs allows deletion of internal files which leads to remote command execution in gogs.io/gogs

  GO-2025-3778: Gogs XSS allowed by stored call in PDF renderer in gogs.io/gogs

Feb 25, 2023 GO-2022-1060 +5 more

  GO-2022-1060: Gogs vulnerable to Cross-site Scripting in gogs.io/gogs

  GO-2024-3275: Unpatched Remote Code Execution in Gogs in gogs.io/gogs

  GO-2024-3355: Remote Command Execution in file editing in gogs in gogs.io/gogs

  GO-2024-3356: Path Traversal in file update API in gogs in gogs.io/gogs

  GO-2025-3776: Gogs allows deletion of internal files which leads to remote command execution in gogs.io/gogs

  GO-2025-3778: Gogs XSS allowed by stored call in PDF renderer in gogs.io/gogs

Feb 25, 2023 GO-2022-1060 +5 more

  GO-2022-1060: Gogs vulnerable to Cross-site Scripting in gogs.io/gogs

  GO-2024-3275: Unpatched Remote Code Execution in Gogs in gogs.io/gogs

  GO-2024-3355: Remote Command Execution in file editing in gogs in gogs.io/gogs

  GO-2024-3356: Path Traversal in file update API in gogs in gogs.io/gogs

  GO-2025-3776: Gogs allows deletion of internal files which leads to remote command execution in gogs.io/gogs

  GO-2025-3778: Gogs XSS allowed by stored call in PDF renderer in gogs.io/gogs

Feb 25, 2023 GO-2022-1060 +5 more

  GO-2022-1060: Gogs vulnerable to Cross-site Scripting in gogs.io/gogs

  GO-2024-3275: Unpatched Remote Code Execution in Gogs in gogs.io/gogs

  GO-2024-3355: Remote Command Execution in file editing in gogs in gogs.io/gogs

  GO-2024-3356: Path Traversal in file update API in gogs in gogs.io/gogs

  GO-2025-3776: Gogs allows deletion of internal files which leads to remote command execution in gogs.io/gogs

  GO-2025-3778: Gogs XSS allowed by stored call in PDF renderer in gogs.io/gogs

Feb 25, 2023 GO-2022-1060 +6 more

  GO-2022-1060: Gogs vulnerable to Cross-site Scripting in gogs.io/gogs

  GO-2023-1596: Gogs OS Command Injection vulnerability in gogs.io/gogs

  GO-2024-3275: Unpatched Remote Code Execution in Gogs in gogs.io/gogs

  GO-2024-3355: Remote Command Execution in file editing in gogs in gogs.io/gogs

  GO-2024-3356: Path Traversal in file update API in gogs in gogs.io/gogs

  GO-2025-3776: Gogs allows deletion of internal files which leads to remote command execution in gogs.io/gogs

  GO-2025-3778: Gogs XSS allowed by stored call in PDF renderer in gogs.io/gogs

Aug 2, 2022 GO-2022-1060 +6 more

  GO-2022-1060: Gogs vulnerable to Cross-site Scripting in gogs.io/gogs

  GO-2023-1596: Gogs OS Command Injection vulnerability in gogs.io/gogs

  GO-2024-3275: Unpatched Remote Code Execution in Gogs in gogs.io/gogs

  GO-2024-3355: Remote Command Execution in file editing in gogs in gogs.io/gogs

  GO-2024-3356: Path Traversal in file update API in gogs in gogs.io/gogs

  GO-2025-3776: Gogs allows deletion of internal files which leads to remote command execution in gogs.io/gogs

  GO-2025-3778: Gogs XSS allowed by stored call in PDF renderer in gogs.io/gogs

Aug 2, 2022 GO-2022-1060 +6 more

  GO-2022-1060: Gogs vulnerable to Cross-site Scripting in gogs.io/gogs

  GO-2023-1596: Gogs OS Command Injection vulnerability in gogs.io/gogs

  GO-2024-3275: Unpatched Remote Code Execution in Gogs in gogs.io/gogs

  GO-2024-3355: Remote Command Execution in file editing in gogs in gogs.io/gogs

  GO-2024-3356: Path Traversal in file update API in gogs in gogs.io/gogs

  GO-2025-3776: Gogs allows deletion of internal files which leads to remote command execution in gogs.io/gogs

  GO-2025-3778: Gogs XSS allowed by stored call in PDF renderer in gogs.io/gogs

Jun 7, 2022 GO-2022-1060 +6 more

  GO-2022-1060: Gogs vulnerable to Cross-site Scripting in gogs.io/gogs

  GO-2023-1596: Gogs OS Command Injection vulnerability in gogs.io/gogs

  GO-2024-3275: Unpatched Remote Code Execution in Gogs in gogs.io/gogs

  GO-2024-3355: Remote Command Execution in file editing in gogs in gogs.io/gogs

  GO-2024-3356: Path Traversal in file update API in gogs in gogs.io/gogs

  GO-2025-3776: Gogs allows deletion of internal files which leads to remote command execution in gogs.io/gogs

  GO-2025-3778: Gogs XSS allowed by stored call in PDF renderer in gogs.io/gogs

Jun 7, 2022 GO-2022-0483 +10 more

  GO-2022-0483: Cross-site Scripting vulnerability in repository issue list in Gogs in gogs.io/gogs

  GO-2022-0556: OS Command Injection in file editor in Gogs in gogs.io/gogs

  GO-2022-0562: Path Traversal in Git HTTP endpoints in Gogs in gogs.io/gogs

  GO-2022-0570: Path Traversal in file editor on Windows in Gogs in gogs.io/gogs

  GO-2022-1060: Gogs vulnerable to Cross-site Scripting in gogs.io/gogs

  GO-2023-1596: Gogs OS Command Injection vulnerability in gogs.io/gogs

  GO-2024-3275: Unpatched Remote Code Execution in Gogs in gogs.io/gogs

  GO-2024-3355: Remote Command Execution in file editing in gogs in gogs.io/gogs

  GO-2024-3356: Path Traversal in file update API in gogs in gogs.io/gogs

  GO-2025-3776: Gogs allows deletion of internal files which leads to remote command execution in gogs.io/gogs

  GO-2025-3778: Gogs XSS allowed by stored call in PDF renderer in gogs.io/gogs

May 31, 2022 GO-2022-0483 +10 more

  GO-2022-0483: Cross-site Scripting vulnerability in repository issue list in Gogs in gogs.io/gogs

  GO-2022-0556: OS Command Injection in file editor in Gogs in gogs.io/gogs

  GO-2022-0562: Path Traversal in Git HTTP endpoints in Gogs in gogs.io/gogs

  GO-2022-0570: Path Traversal in file editor on Windows in Gogs in gogs.io/gogs

  GO-2022-1060: Gogs vulnerable to Cross-site Scripting in gogs.io/gogs

  GO-2023-1596: Gogs OS Command Injection vulnerability in gogs.io/gogs

  GO-2024-3275: Unpatched Remote Code Execution in Gogs in gogs.io/gogs

  GO-2024-3355: Remote Command Execution in file editing in gogs in gogs.io/gogs

  GO-2024-3356: Path Traversal in file update API in gogs in gogs.io/gogs

  GO-2025-3776: Gogs allows deletion of internal files which leads to remote command execution in gogs.io/gogs

  GO-2025-3778: Gogs XSS allowed by stored call in PDF renderer in gogs.io/gogs

May 31, 2022 GO-2022-0471 +14 more

  GO-2022-0471: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0473: Cross site scripting via cookies in gogs in gogs.io/gogs

  GO-2022-0483: Cross-site Scripting vulnerability in repository issue list in Gogs in gogs.io/gogs

  GO-2022-0556: OS Command Injection in file editor in Gogs in gogs.io/gogs

  GO-2022-0562: Path Traversal in Git HTTP endpoints in Gogs in gogs.io/gogs

  GO-2022-0570: Path Traversal in file editor on Windows in Gogs in gogs.io/gogs

  GO-2022-0583: Server-Side Request Forgery in gogs webhook in gogs.io/gogs

  GO-2022-0749: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-1060: Gogs vulnerable to Cross-site Scripting in gogs.io/gogs

  GO-2023-1596: Gogs OS Command Injection vulnerability in gogs.io/gogs

  GO-2024-3275: Unpatched Remote Code Execution in Gogs in gogs.io/gogs

  GO-2024-3355: Remote Command Execution in file editing in gogs in gogs.io/gogs

  GO-2024-3356: Path Traversal in file update API in gogs in gogs.io/gogs

  GO-2025-3776: Gogs allows deletion of internal files which leads to remote command execution in gogs.io/gogs

  GO-2025-3778: Gogs XSS allowed by stored call in PDF renderer in gogs.io/gogs

May 5, 2022 GO-2022-0471 +14 more

  GO-2022-0471: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0473: Cross site scripting via cookies in gogs in gogs.io/gogs

  GO-2022-0483: Cross-site Scripting vulnerability in repository issue list in Gogs in gogs.io/gogs

  GO-2022-0556: OS Command Injection in file editor in Gogs in gogs.io/gogs

  GO-2022-0562: Path Traversal in Git HTTP endpoints in Gogs in gogs.io/gogs

  GO-2022-0570: Path Traversal in file editor on Windows in Gogs in gogs.io/gogs

  GO-2022-0583: Server-Side Request Forgery in gogs webhook in gogs.io/gogs

  GO-2022-0749: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-1060: Gogs vulnerable to Cross-site Scripting in gogs.io/gogs

  GO-2023-1596: Gogs OS Command Injection vulnerability in gogs.io/gogs

  GO-2024-3275: Unpatched Remote Code Execution in Gogs in gogs.io/gogs

  GO-2024-3355: Remote Command Execution in file editing in gogs in gogs.io/gogs

  GO-2024-3356: Path Traversal in file update API in gogs in gogs.io/gogs

  GO-2025-3776: Gogs allows deletion of internal files which leads to remote command execution in gogs.io/gogs

  GO-2025-3778: Gogs XSS allowed by stored call in PDF renderer in gogs.io/gogs

May 5, 2022 GO-2022-0471 +15 more

  GO-2022-0471: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0473: Cross site scripting via cookies in gogs in gogs.io/gogs

  GO-2022-0483: Cross-site Scripting vulnerability in repository issue list in Gogs in gogs.io/gogs

  GO-2022-0556: OS Command Injection in file editor in Gogs in gogs.io/gogs

  GO-2022-0562: Path Traversal in Git HTTP endpoints in Gogs in gogs.io/gogs

  GO-2022-0570: Path Traversal in file editor on Windows in Gogs in gogs.io/gogs

  GO-2022-0583: Server-Side Request Forgery in gogs webhook in gogs.io/gogs

  GO-2022-0597: Cross-site Scripting in Gogs in gogs.io/gogs

  GO-2022-0749: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-1060: Gogs vulnerable to Cross-site Scripting in gogs.io/gogs

  GO-2023-1596: Gogs OS Command Injection vulnerability in gogs.io/gogs

  GO-2024-3275: Unpatched Remote Code Execution in Gogs in gogs.io/gogs

  GO-2024-3355: Remote Command Execution in file editing in gogs in gogs.io/gogs

  GO-2024-3356: Path Traversal in file update API in gogs in gogs.io/gogs

  GO-2025-3776: Gogs allows deletion of internal files which leads to remote command execution in gogs.io/gogs

  GO-2025-3778: Gogs XSS allowed by stored call in PDF renderer in gogs.io/gogs

Mar 19, 2022 GO-2022-0471 +15 more

  GO-2022-0471: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0473: Cross site scripting via cookies in gogs in gogs.io/gogs

  GO-2022-0483: Cross-site Scripting vulnerability in repository issue list in Gogs in gogs.io/gogs

  GO-2022-0556: OS Command Injection in file editor in Gogs in gogs.io/gogs

  GO-2022-0562: Path Traversal in Git HTTP endpoints in Gogs in gogs.io/gogs

  GO-2022-0570: Path Traversal in file editor on Windows in Gogs in gogs.io/gogs

  GO-2022-0583: Server-Side Request Forgery in gogs webhook in gogs.io/gogs

  GO-2022-0597: Cross-site Scripting in Gogs in gogs.io/gogs

  GO-2022-0749: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-1060: Gogs vulnerable to Cross-site Scripting in gogs.io/gogs

  GO-2023-1596: Gogs OS Command Injection vulnerability in gogs.io/gogs

  GO-2024-3275: Unpatched Remote Code Execution in Gogs in gogs.io/gogs

  GO-2024-3355: Remote Command Execution in file editing in gogs in gogs.io/gogs

  GO-2024-3356: Path Traversal in file update API in gogs in gogs.io/gogs

  GO-2025-3776: Gogs allows deletion of internal files which leads to remote command execution in gogs.io/gogs

  GO-2025-3778: Gogs XSS allowed by stored call in PDF renderer in gogs.io/gogs

Mar 19, 2022 GO-2022-0471 +16 more

  GO-2022-0471: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0473: Cross site scripting via cookies in gogs in gogs.io/gogs

  GO-2022-0483: Cross-site Scripting vulnerability in repository issue list in Gogs in gogs.io/gogs

  GO-2022-0554: Unrestricted Upload of File with Dangerous Type in Gogs in gogs.io/gogs

  GO-2022-0556: OS Command Injection in file editor in Gogs in gogs.io/gogs

  GO-2022-0562: Path Traversal in Git HTTP endpoints in Gogs in gogs.io/gogs

  GO-2022-0570: Path Traversal in file editor on Windows in Gogs in gogs.io/gogs

  GO-2022-0583: Server-Side Request Forgery in gogs webhook in gogs.io/gogs

  GO-2022-0597: Cross-site Scripting in Gogs in gogs.io/gogs

  GO-2022-0749: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-1060: Gogs vulnerable to Cross-site Scripting in gogs.io/gogs

  GO-2023-1596: Gogs OS Command Injection vulnerability in gogs.io/gogs

  GO-2024-3275: Unpatched Remote Code Execution in Gogs in gogs.io/gogs

  GO-2024-3355: Remote Command Execution in file editing in gogs in gogs.io/gogs

  GO-2024-3356: Path Traversal in file update API in gogs in gogs.io/gogs

  GO-2025-3776: Gogs allows deletion of internal files which leads to remote command execution in gogs.io/gogs

  GO-2025-3778: Gogs XSS allowed by stored call in PDF renderer in gogs.io/gogs

Mar 11, 2022 GO-2022-0471 +16 more

  GO-2022-0471: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0473: Cross site scripting via cookies in gogs in gogs.io/gogs

  GO-2022-0483: Cross-site Scripting vulnerability in repository issue list in Gogs in gogs.io/gogs

  GO-2022-0554: Unrestricted Upload of File with Dangerous Type in Gogs in gogs.io/gogs

  GO-2022-0556: OS Command Injection in file editor in Gogs in gogs.io/gogs

  GO-2022-0562: Path Traversal in Git HTTP endpoints in Gogs in gogs.io/gogs

  GO-2022-0570: Path Traversal in file editor on Windows in Gogs in gogs.io/gogs

  GO-2022-0583: Server-Side Request Forgery in gogs webhook in gogs.io/gogs

  GO-2022-0597: Cross-site Scripting in Gogs in gogs.io/gogs

  GO-2022-0749: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-1060: Gogs vulnerable to Cross-site Scripting in gogs.io/gogs

  GO-2023-1596: Gogs OS Command Injection vulnerability in gogs.io/gogs

  GO-2024-3275: Unpatched Remote Code Execution in Gogs in gogs.io/gogs

  GO-2024-3355: Remote Command Execution in file editing in gogs in gogs.io/gogs

  GO-2024-3356: Path Traversal in file update API in gogs in gogs.io/gogs

  GO-2025-3776: Gogs allows deletion of internal files which leads to remote command execution in gogs.io/gogs

  GO-2025-3778: Gogs XSS allowed by stored call in PDF renderer in gogs.io/gogs

Mar 11, 2022 GO-2022-0369 +19 more

  GO-2022-0369: Gogs vulnerable to improper PAM authorization handling in gogs.io/gogs

  GO-2022-0377: SSRF in repository migration in gogs.io/gogs

  GO-2022-0471: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0473: Cross site scripting via cookies in gogs in gogs.io/gogs

  GO-2022-0483: Cross-site Scripting vulnerability in repository issue list in Gogs in gogs.io/gogs

  GO-2022-0554: Unrestricted Upload of File with Dangerous Type in Gogs in gogs.io/gogs

  GO-2022-0556: OS Command Injection in file editor in Gogs in gogs.io/gogs

  GO-2022-0562: Path Traversal in Git HTTP endpoints in Gogs in gogs.io/gogs

  GO-2022-0566: SSRF in repository migration in gogs.io/gogs

  GO-2022-0570: Path Traversal in file editor on Windows in Gogs in gogs.io/gogs

  GO-2022-0583: Server-Side Request Forgery in gogs webhook in gogs.io/gogs

  GO-2022-0597: Cross-site Scripting in Gogs in gogs.io/gogs

  GO-2022-0749: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-1060: Gogs vulnerable to Cross-site Scripting in gogs.io/gogs

  GO-2023-1596: Gogs OS Command Injection vulnerability in gogs.io/gogs

  GO-2024-3275: Unpatched Remote Code Execution in Gogs in gogs.io/gogs

  GO-2024-3355: Remote Command Execution in file editing in gogs in gogs.io/gogs

  GO-2024-3356: Path Traversal in file update API in gogs in gogs.io/gogs

  GO-2025-3776: Gogs allows deletion of internal files which leads to remote command execution in gogs.io/gogs

  GO-2025-3778: Gogs XSS allowed by stored call in PDF renderer in gogs.io/gogs

Jan 17, 2022 GO-2022-0369 +19 more

  GO-2022-0369: Gogs vulnerable to improper PAM authorization handling in gogs.io/gogs

  GO-2022-0377: SSRF in repository migration in gogs.io/gogs

  GO-2022-0471: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0473: Cross site scripting via cookies in gogs in gogs.io/gogs

  GO-2022-0483: Cross-site Scripting vulnerability in repository issue list in Gogs in gogs.io/gogs

  GO-2022-0554: Unrestricted Upload of File with Dangerous Type in Gogs in gogs.io/gogs

  GO-2022-0556: OS Command Injection in file editor in Gogs in gogs.io/gogs

  GO-2022-0562: Path Traversal in Git HTTP endpoints in Gogs in gogs.io/gogs

  GO-2022-0566: SSRF in repository migration in gogs.io/gogs

  GO-2022-0570: Path Traversal in file editor on Windows in Gogs in gogs.io/gogs

  GO-2022-0583: Server-Side Request Forgery in gogs webhook in gogs.io/gogs

  GO-2022-0597: Cross-site Scripting in Gogs in gogs.io/gogs

  GO-2022-0749: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-1060: Gogs vulnerable to Cross-site Scripting in gogs.io/gogs

  GO-2023-1596: Gogs OS Command Injection vulnerability in gogs.io/gogs

  GO-2024-3275: Unpatched Remote Code Execution in Gogs in gogs.io/gogs

  GO-2024-3355: Remote Command Execution in file editing in gogs in gogs.io/gogs

  GO-2024-3356: Path Traversal in file update API in gogs in gogs.io/gogs

  GO-2025-3776: Gogs allows deletion of internal files which leads to remote command execution in gogs.io/gogs

  GO-2025-3778: Gogs XSS allowed by stored call in PDF renderer in gogs.io/gogs

Jan 17, 2022 GO-2022-0369 +19 more

  GO-2022-0369: Gogs vulnerable to improper PAM authorization handling in gogs.io/gogs

  GO-2022-0377: SSRF in repository migration in gogs.io/gogs

  GO-2022-0471: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0473: Cross site scripting via cookies in gogs in gogs.io/gogs

  GO-2022-0483: Cross-site Scripting vulnerability in repository issue list in Gogs in gogs.io/gogs

  GO-2022-0554: Unrestricted Upload of File with Dangerous Type in Gogs in gogs.io/gogs

  GO-2022-0556: OS Command Injection in file editor in Gogs in gogs.io/gogs

  GO-2022-0562: Path Traversal in Git HTTP endpoints in Gogs in gogs.io/gogs

  GO-2022-0566: SSRF in repository migration in gogs.io/gogs

  GO-2022-0570: Path Traversal in file editor on Windows in Gogs in gogs.io/gogs

  GO-2022-0583: Server-Side Request Forgery in gogs webhook in gogs.io/gogs

  GO-2022-0597: Cross-site Scripting in Gogs in gogs.io/gogs

  GO-2022-0749: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-1060: Gogs vulnerable to Cross-site Scripting in gogs.io/gogs

  GO-2023-1596: Gogs OS Command Injection vulnerability in gogs.io/gogs

  GO-2024-3275: Unpatched Remote Code Execution in Gogs in gogs.io/gogs

  GO-2024-3355: Remote Command Execution in file editing in gogs in gogs.io/gogs

  GO-2024-3356: Path Traversal in file update API in gogs in gogs.io/gogs

  GO-2025-3776: Gogs allows deletion of internal files which leads to remote command execution in gogs.io/gogs

  GO-2025-3778: Gogs XSS allowed by stored call in PDF renderer in gogs.io/gogs

Oct 7, 2020 GO-2022-0369 +19 more

  GO-2022-0369: Gogs vulnerable to improper PAM authorization handling in gogs.io/gogs

  GO-2022-0377: SSRF in repository migration in gogs.io/gogs

  GO-2022-0471: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0473: Cross site scripting via cookies in gogs in gogs.io/gogs

  GO-2022-0483: Cross-site Scripting vulnerability in repository issue list in Gogs in gogs.io/gogs

  GO-2022-0554: Unrestricted Upload of File with Dangerous Type in Gogs in gogs.io/gogs

  GO-2022-0556: OS Command Injection in file editor in Gogs in gogs.io/gogs

  GO-2022-0562: Path Traversal in Git HTTP endpoints in Gogs in gogs.io/gogs

  GO-2022-0566: SSRF in repository migration in gogs.io/gogs

  GO-2022-0570: Path Traversal in file editor on Windows in Gogs in gogs.io/gogs

  GO-2022-0583: Server-Side Request Forgery in gogs webhook in gogs.io/gogs

  GO-2022-0597: Cross-site Scripting in Gogs in gogs.io/gogs

  GO-2022-0749: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-1060: Gogs vulnerable to Cross-site Scripting in gogs.io/gogs

  GO-2023-1596: Gogs OS Command Injection vulnerability in gogs.io/gogs

  GO-2024-3275: Unpatched Remote Code Execution in Gogs in gogs.io/gogs

  GO-2024-3355: Remote Command Execution in file editing in gogs in gogs.io/gogs

  GO-2024-3356: Path Traversal in file update API in gogs in gogs.io/gogs

  GO-2025-3776: Gogs allows deletion of internal files which leads to remote command execution in gogs.io/gogs

  GO-2025-3778: Gogs XSS allowed by stored call in PDF renderer in gogs.io/gogs

Sep 26, 2020 GO-2022-0369 +19 more

  GO-2022-0369: Gogs vulnerable to improper PAM authorization handling in gogs.io/gogs

  GO-2022-0377: SSRF in repository migration in gogs.io/gogs

  GO-2022-0471: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0473: Cross site scripting via cookies in gogs in gogs.io/gogs

  GO-2022-0483: Cross-site Scripting vulnerability in repository issue list in Gogs in gogs.io/gogs

  GO-2022-0554: Unrestricted Upload of File with Dangerous Type in Gogs in gogs.io/gogs

  GO-2022-0556: OS Command Injection in file editor in Gogs in gogs.io/gogs

  GO-2022-0562: Path Traversal in Git HTTP endpoints in Gogs in gogs.io/gogs

  GO-2022-0566: SSRF in repository migration in gogs.io/gogs

  GO-2022-0570: Path Traversal in file editor on Windows in Gogs in gogs.io/gogs

  GO-2022-0583: Server-Side Request Forgery in gogs webhook in gogs.io/gogs

  GO-2022-0597: Cross-site Scripting in Gogs in gogs.io/gogs

  GO-2022-0749: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-1060: Gogs vulnerable to Cross-site Scripting in gogs.io/gogs

  GO-2023-1596: Gogs OS Command Injection vulnerability in gogs.io/gogs

  GO-2024-3275: Unpatched Remote Code Execution in Gogs in gogs.io/gogs

  GO-2024-3355: Remote Command Execution in file editing in gogs in gogs.io/gogs

  GO-2024-3356: Path Traversal in file update API in gogs in gogs.io/gogs

  GO-2025-3776: Gogs allows deletion of internal files which leads to remote command execution in gogs.io/gogs

  GO-2025-3778: Gogs XSS allowed by stored call in PDF renderer in gogs.io/gogs

Aug 27, 2020 GO-2022-0369 +19 more

  GO-2022-0369: Gogs vulnerable to improper PAM authorization handling in gogs.io/gogs

  GO-2022-0377: SSRF in repository migration in gogs.io/gogs

  GO-2022-0471: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0473: Cross site scripting via cookies in gogs in gogs.io/gogs

  GO-2022-0483: Cross-site Scripting vulnerability in repository issue list in Gogs in gogs.io/gogs

  GO-2022-0554: Unrestricted Upload of File with Dangerous Type in Gogs in gogs.io/gogs

  GO-2022-0556: OS Command Injection in file editor in Gogs in gogs.io/gogs

  GO-2022-0562: Path Traversal in Git HTTP endpoints in Gogs in gogs.io/gogs

  GO-2022-0566: SSRF in repository migration in gogs.io/gogs

  GO-2022-0570: Path Traversal in file editor on Windows in Gogs in gogs.io/gogs

  GO-2022-0583: Server-Side Request Forgery in gogs webhook in gogs.io/gogs

  GO-2022-0597: Cross-site Scripting in Gogs in gogs.io/gogs

  GO-2022-0749: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-1060: Gogs vulnerable to Cross-site Scripting in gogs.io/gogs

  GO-2023-1596: Gogs OS Command Injection vulnerability in gogs.io/gogs

  GO-2024-3275: Unpatched Remote Code Execution in Gogs in gogs.io/gogs

  GO-2024-3355: Remote Command Execution in file editing in gogs in gogs.io/gogs

  GO-2024-3356: Path Traversal in file update API in gogs in gogs.io/gogs

  GO-2025-3776: Gogs allows deletion of internal files which leads to remote command execution in gogs.io/gogs

  GO-2025-3778: Gogs XSS allowed by stored call in PDF renderer in gogs.io/gogs

Aug 22, 2020 GO-2022-0369 +19 more

  GO-2022-0369: Gogs vulnerable to improper PAM authorization handling in gogs.io/gogs

  GO-2022-0377: SSRF in repository migration in gogs.io/gogs

  GO-2022-0471: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0473: Cross site scripting via cookies in gogs in gogs.io/gogs

  GO-2022-0483: Cross-site Scripting vulnerability in repository issue list in Gogs in gogs.io/gogs

  GO-2022-0554: Unrestricted Upload of File with Dangerous Type in Gogs in gogs.io/gogs

  GO-2022-0556: OS Command Injection in file editor in Gogs in gogs.io/gogs

  GO-2022-0562: Path Traversal in Git HTTP endpoints in Gogs in gogs.io/gogs

  GO-2022-0566: SSRF in repository migration in gogs.io/gogs

  GO-2022-0570: Path Traversal in file editor on Windows in Gogs in gogs.io/gogs

  GO-2022-0583: Server-Side Request Forgery in gogs webhook in gogs.io/gogs

  GO-2022-0597: Cross-site Scripting in Gogs in gogs.io/gogs

  GO-2022-0749: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-1060: Gogs vulnerable to Cross-site Scripting in gogs.io/gogs

  GO-2023-1596: Gogs OS Command Injection vulnerability in gogs.io/gogs

  GO-2024-3275: Unpatched Remote Code Execution in Gogs in gogs.io/gogs

  GO-2024-3355: Remote Command Execution in file editing in gogs in gogs.io/gogs

  GO-2024-3356: Path Traversal in file update API in gogs in gogs.io/gogs

  GO-2025-3776: Gogs allows deletion of internal files which leads to remote command execution in gogs.io/gogs

  GO-2025-3778: Gogs XSS allowed by stored call in PDF renderer in gogs.io/gogs

Aug 12, 2019 GO-2022-0369 +23 more

  GO-2022-0369: Gogs vulnerable to improper PAM authorization handling in gogs.io/gogs

  GO-2022-0377: SSRF in repository migration in gogs.io/gogs

  GO-2022-0471: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0473: Cross site scripting via cookies in gogs in gogs.io/gogs

  GO-2022-0483: Cross-site Scripting vulnerability in repository issue list in Gogs in gogs.io/gogs

  GO-2022-0554: Unrestricted Upload of File with Dangerous Type in Gogs in gogs.io/gogs

  GO-2022-0556: OS Command Injection in file editor in Gogs in gogs.io/gogs

  GO-2022-0562: Path Traversal in Git HTTP endpoints in Gogs in gogs.io/gogs

  GO-2022-0566: SSRF in repository migration in gogs.io/gogs

  GO-2022-0570: Path Traversal in file editor on Windows in Gogs in gogs.io/gogs

  GO-2022-0583: Server-Side Request Forgery in gogs webhook in gogs.io/gogs

  GO-2022-0597: Cross-site Scripting in Gogs in gogs.io/gogs

  GO-2022-0749: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0788: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0822: Open Redirect in gogs.io/gogs

  GO-2022-1060: Gogs vulnerable to Cross-site Scripting in gogs.io/gogs

  GO-2023-1596: Gogs OS Command Injection vulnerability in gogs.io/gogs

  GO-2023-1971: Gogs and Gitea SSRF Vulnerability in code.gitea.io/gitea

  GO-2023-1972: Gogs XSS Vulnerability in gogs.io/gogs

  GO-2024-3275: Unpatched Remote Code Execution in Gogs in gogs.io/gogs

  GO-2024-3355: Remote Command Execution in file editing in gogs in gogs.io/gogs

  GO-2024-3356: Path Traversal in file update API in gogs in gogs.io/gogs

  GO-2025-3776: Gogs allows deletion of internal files which leads to remote command execution in gogs.io/gogs

  GO-2025-3778: Gogs XSS allowed by stored call in PDF renderer in gogs.io/gogs

Jan 31, 2019 GO-2022-0369 +24 more

  GO-2022-0369: Gogs vulnerable to improper PAM authorization handling in gogs.io/gogs

  GO-2022-0377: SSRF in repository migration in gogs.io/gogs

  GO-2022-0471: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0473: Cross site scripting via cookies in gogs in gogs.io/gogs

  GO-2022-0483: Cross-site Scripting vulnerability in repository issue list in Gogs in gogs.io/gogs

  GO-2022-0554: Unrestricted Upload of File with Dangerous Type in Gogs in gogs.io/gogs

  GO-2022-0556: OS Command Injection in file editor in Gogs in gogs.io/gogs

  GO-2022-0562: Path Traversal in Git HTTP endpoints in Gogs in gogs.io/gogs

  GO-2022-0566: SSRF in repository migration in gogs.io/gogs

  GO-2022-0570: Path Traversal in file editor on Windows in Gogs in gogs.io/gogs

  GO-2022-0583: Server-Side Request Forgery in gogs webhook in gogs.io/gogs

  GO-2022-0597: Cross-site Scripting in Gogs in gogs.io/gogs

  GO-2022-0749: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0788: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0797: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0822: Open Redirect in gogs.io/gogs

  GO-2022-1060: Gogs vulnerable to Cross-site Scripting in gogs.io/gogs

  GO-2023-1596: Gogs OS Command Injection vulnerability in gogs.io/gogs

  GO-2023-1971: Gogs and Gitea SSRF Vulnerability in code.gitea.io/gitea

  GO-2023-1972: Gogs XSS Vulnerability in gogs.io/gogs

  GO-2024-3275: Unpatched Remote Code Execution in Gogs in gogs.io/gogs

  GO-2024-3355: Remote Command Execution in file editing in gogs in gogs.io/gogs

  GO-2024-3356: Path Traversal in file update API in gogs in gogs.io/gogs

  GO-2025-3776: Gogs allows deletion of internal files which leads to remote command execution in gogs.io/gogs

  GO-2025-3778: Gogs XSS allowed by stored call in PDF renderer in gogs.io/gogs

Dec 12, 2018 GO-2022-0369 +24 more

  GO-2022-0369: Gogs vulnerable to improper PAM authorization handling in gogs.io/gogs

  GO-2022-0377: SSRF in repository migration in gogs.io/gogs

  GO-2022-0471: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0473: Cross site scripting via cookies in gogs in gogs.io/gogs

  GO-2022-0483: Cross-site Scripting vulnerability in repository issue list in Gogs in gogs.io/gogs

  GO-2022-0554: Unrestricted Upload of File with Dangerous Type in Gogs in gogs.io/gogs

  GO-2022-0556: OS Command Injection in file editor in Gogs in gogs.io/gogs

  GO-2022-0562: Path Traversal in Git HTTP endpoints in Gogs in gogs.io/gogs

  GO-2022-0566: SSRF in repository migration in gogs.io/gogs

  GO-2022-0570: Path Traversal in file editor on Windows in Gogs in gogs.io/gogs

  GO-2022-0583: Server-Side Request Forgery in gogs webhook in gogs.io/gogs

  GO-2022-0597: Cross-site Scripting in Gogs in gogs.io/gogs

  GO-2022-0749: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0788: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0797: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0822: Open Redirect in gogs.io/gogs

  GO-2022-1060: Gogs vulnerable to Cross-site Scripting in gogs.io/gogs

  GO-2023-1596: Gogs OS Command Injection vulnerability in gogs.io/gogs

  GO-2023-1971: Gogs and Gitea SSRF Vulnerability in code.gitea.io/gitea

  GO-2023-1972: Gogs XSS Vulnerability in gogs.io/gogs

  GO-2024-3275: Unpatched Remote Code Execution in Gogs in gogs.io/gogs

  GO-2024-3355: Remote Command Execution in file editing in gogs in gogs.io/gogs

  GO-2024-3356: Path Traversal in file update API in gogs in gogs.io/gogs

  GO-2025-3776: Gogs allows deletion of internal files which leads to remote command execution in gogs.io/gogs

  GO-2025-3778: Gogs XSS allowed by stored call in PDF renderer in gogs.io/gogs

Sep 16, 2018 GO-2022-0369 +24 more

  GO-2022-0369: Gogs vulnerable to improper PAM authorization handling in gogs.io/gogs

  GO-2022-0377: SSRF in repository migration in gogs.io/gogs

  GO-2022-0471: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0473: Cross site scripting via cookies in gogs in gogs.io/gogs

  GO-2022-0483: Cross-site Scripting vulnerability in repository issue list in Gogs in gogs.io/gogs

  GO-2022-0554: Unrestricted Upload of File with Dangerous Type in Gogs in gogs.io/gogs

  GO-2022-0556: OS Command Injection in file editor in Gogs in gogs.io/gogs

  GO-2022-0562: Path Traversal in Git HTTP endpoints in Gogs in gogs.io/gogs

  GO-2022-0566: SSRF in repository migration in gogs.io/gogs

  GO-2022-0570: Path Traversal in file editor on Windows in Gogs in gogs.io/gogs

  GO-2022-0583: Server-Side Request Forgery in gogs webhook in gogs.io/gogs

  GO-2022-0597: Cross-site Scripting in Gogs in gogs.io/gogs

  GO-2022-0749: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0788: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0797: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0822: Open Redirect in gogs.io/gogs

  GO-2022-1060: Gogs vulnerable to Cross-site Scripting in gogs.io/gogs

  GO-2023-1596: Gogs OS Command Injection vulnerability in gogs.io/gogs

  GO-2023-1971: Gogs and Gitea SSRF Vulnerability in code.gitea.io/gitea

  GO-2023-1972: Gogs XSS Vulnerability in gogs.io/gogs

  GO-2024-3275: Unpatched Remote Code Execution in Gogs in gogs.io/gogs

  GO-2024-3355: Remote Command Execution in file editing in gogs in gogs.io/gogs

  GO-2024-3356: Path Traversal in file update API in gogs in gogs.io/gogs

  GO-2025-3776: Gogs allows deletion of internal files which leads to remote command execution in gogs.io/gogs

  GO-2025-3778: Gogs XSS allowed by stored call in PDF renderer in gogs.io/gogs

Jun 4, 2018 GO-2022-0369 +24 more

  GO-2022-0369: Gogs vulnerable to improper PAM authorization handling in gogs.io/gogs

  GO-2022-0377: SSRF in repository migration in gogs.io/gogs

  GO-2022-0471: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0473: Cross site scripting via cookies in gogs in gogs.io/gogs

  GO-2022-0483: Cross-site Scripting vulnerability in repository issue list in Gogs in gogs.io/gogs

  GO-2022-0554: Unrestricted Upload of File with Dangerous Type in Gogs in gogs.io/gogs

  GO-2022-0556: OS Command Injection in file editor in Gogs in gogs.io/gogs

  GO-2022-0562: Path Traversal in Git HTTP endpoints in Gogs in gogs.io/gogs

  GO-2022-0566: SSRF in repository migration in gogs.io/gogs

  GO-2022-0570: Path Traversal in file editor on Windows in Gogs in gogs.io/gogs

  GO-2022-0583: Server-Side Request Forgery in gogs webhook in gogs.io/gogs

  GO-2022-0597: Cross-site Scripting in Gogs in gogs.io/gogs

  GO-2022-0749: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0788: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0797: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0822: Open Redirect in gogs.io/gogs

  GO-2022-1060: Gogs vulnerable to Cross-site Scripting in gogs.io/gogs

  GO-2023-1596: Gogs OS Command Injection vulnerability in gogs.io/gogs

  GO-2023-1971: Gogs and Gitea SSRF Vulnerability in code.gitea.io/gitea

  GO-2023-1972: Gogs XSS Vulnerability in gogs.io/gogs

  GO-2024-3275: Unpatched Remote Code Execution in Gogs in gogs.io/gogs

  GO-2024-3355: Remote Command Execution in file editing in gogs in gogs.io/gogs

  GO-2024-3356: Path Traversal in file update API in gogs in gogs.io/gogs

  GO-2025-3776: Gogs allows deletion of internal files which leads to remote command execution in gogs.io/gogs

  GO-2025-3778: Gogs XSS allowed by stored call in PDF renderer in gogs.io/gogs

Mar 31, 2018 GO-2022-0369 +24 more

  GO-2022-0369: Gogs vulnerable to improper PAM authorization handling in gogs.io/gogs

  GO-2022-0377: SSRF in repository migration in gogs.io/gogs

  GO-2022-0471: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0473: Cross site scripting via cookies in gogs in gogs.io/gogs

  GO-2022-0483: Cross-site Scripting vulnerability in repository issue list in Gogs in gogs.io/gogs

  GO-2022-0554: Unrestricted Upload of File with Dangerous Type in Gogs in gogs.io/gogs

  GO-2022-0556: OS Command Injection in file editor in Gogs in gogs.io/gogs

  GO-2022-0562: Path Traversal in Git HTTP endpoints in Gogs in gogs.io/gogs

  GO-2022-0566: SSRF in repository migration in gogs.io/gogs

  GO-2022-0570: Path Traversal in file editor on Windows in Gogs in gogs.io/gogs

  GO-2022-0583: Server-Side Request Forgery in gogs webhook in gogs.io/gogs

  GO-2022-0597: Cross-site Scripting in Gogs in gogs.io/gogs

  GO-2022-0749: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0788: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0797: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0822: Open Redirect in gogs.io/gogs

  GO-2022-1060: Gogs vulnerable to Cross-site Scripting in gogs.io/gogs

  GO-2023-1596: Gogs OS Command Injection vulnerability in gogs.io/gogs

  GO-2023-1971: Gogs and Gitea SSRF Vulnerability in code.gitea.io/gitea

  GO-2023-1972: Gogs XSS Vulnerability in gogs.io/gogs

  GO-2024-3275: Unpatched Remote Code Execution in Gogs in gogs.io/gogs

  GO-2024-3355: Remote Command Execution in file editing in gogs in gogs.io/gogs

  GO-2024-3356: Path Traversal in file update API in gogs in gogs.io/gogs

  GO-2025-3776: Gogs allows deletion of internal files which leads to remote command execution in gogs.io/gogs

  GO-2025-3778: Gogs XSS allowed by stored call in PDF renderer in gogs.io/gogs

Nov 22, 2017 GO-2022-0369 +24 more

  GO-2022-0369: Gogs vulnerable to improper PAM authorization handling in gogs.io/gogs

  GO-2022-0377: SSRF in repository migration in gogs.io/gogs

  GO-2022-0471: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0473: Cross site scripting via cookies in gogs in gogs.io/gogs

  GO-2022-0483: Cross-site Scripting vulnerability in repository issue list in Gogs in gogs.io/gogs

  GO-2022-0554: Unrestricted Upload of File with Dangerous Type in Gogs in gogs.io/gogs

  GO-2022-0556: OS Command Injection in file editor in Gogs in gogs.io/gogs

  GO-2022-0562: Path Traversal in Git HTTP endpoints in Gogs in gogs.io/gogs

  GO-2022-0566: SSRF in repository migration in gogs.io/gogs

  GO-2022-0570: Path Traversal in file editor on Windows in Gogs in gogs.io/gogs

  GO-2022-0583: Server-Side Request Forgery in gogs webhook in gogs.io/gogs

  GO-2022-0597: Cross-site Scripting in Gogs in gogs.io/gogs

  GO-2022-0749: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0788: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0797: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0822: Open Redirect in gogs.io/gogs

  GO-2022-1060: Gogs vulnerable to Cross-site Scripting in gogs.io/gogs

  GO-2023-1596: Gogs OS Command Injection vulnerability in gogs.io/gogs

  GO-2023-1971: Gogs and Gitea SSRF Vulnerability in code.gitea.io/gitea

  GO-2023-1972: Gogs XSS Vulnerability in gogs.io/gogs

  GO-2024-3275: Unpatched Remote Code Execution in Gogs in gogs.io/gogs

  GO-2024-3355: Remote Command Execution in file editing in gogs in gogs.io/gogs

  GO-2024-3356: Path Traversal in file update API in gogs in gogs.io/gogs

  GO-2025-3776: Gogs allows deletion of internal files which leads to remote command execution in gogs.io/gogs

  GO-2025-3778: Gogs XSS allowed by stored call in PDF renderer in gogs.io/gogs

Nov 19, 2017 GO-2022-0369 +24 more

  GO-2022-0369: Gogs vulnerable to improper PAM authorization handling in gogs.io/gogs

  GO-2022-0377: SSRF in repository migration in gogs.io/gogs

  GO-2022-0471: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0473: Cross site scripting via cookies in gogs in gogs.io/gogs

  GO-2022-0483: Cross-site Scripting vulnerability in repository issue list in Gogs in gogs.io/gogs

  GO-2022-0554: Unrestricted Upload of File with Dangerous Type in Gogs in gogs.io/gogs

  GO-2022-0556: OS Command Injection in file editor in Gogs in gogs.io/gogs

  GO-2022-0562: Path Traversal in Git HTTP endpoints in Gogs in gogs.io/gogs

  GO-2022-0566: SSRF in repository migration in gogs.io/gogs

  GO-2022-0570: Path Traversal in file editor on Windows in Gogs in gogs.io/gogs

  GO-2022-0583: Server-Side Request Forgery in gogs webhook in gogs.io/gogs

  GO-2022-0597: Cross-site Scripting in Gogs in gogs.io/gogs

  GO-2022-0749: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0788: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0797: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0822: Open Redirect in gogs.io/gogs

  GO-2022-1060: Gogs vulnerable to Cross-site Scripting in gogs.io/gogs

  GO-2023-1596: Gogs OS Command Injection vulnerability in gogs.io/gogs

  GO-2023-1971: Gogs and Gitea SSRF Vulnerability in code.gitea.io/gitea

  GO-2023-1972: Gogs XSS Vulnerability in gogs.io/gogs

  GO-2024-3275: Unpatched Remote Code Execution in Gogs in gogs.io/gogs

  GO-2024-3355: Remote Command Execution in file editing in gogs in gogs.io/gogs

  GO-2024-3356: Path Traversal in file update API in gogs in gogs.io/gogs

  GO-2025-3776: Gogs allows deletion of internal files which leads to remote command execution in gogs.io/gogs

  GO-2025-3778: Gogs XSS allowed by stored call in PDF renderer in gogs.io/gogs

Aug 15, 2017 GO-2022-0369 +24 more

  GO-2022-0369: Gogs vulnerable to improper PAM authorization handling in gogs.io/gogs

  GO-2022-0377: SSRF in repository migration in gogs.io/gogs

  GO-2022-0471: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0473: Cross site scripting via cookies in gogs in gogs.io/gogs

  GO-2022-0483: Cross-site Scripting vulnerability in repository issue list in Gogs in gogs.io/gogs

  GO-2022-0554: Unrestricted Upload of File with Dangerous Type in Gogs in gogs.io/gogs

  GO-2022-0556: OS Command Injection in file editor in Gogs in gogs.io/gogs

  GO-2022-0562: Path Traversal in Git HTTP endpoints in Gogs in gogs.io/gogs

  GO-2022-0566: SSRF in repository migration in gogs.io/gogs

  GO-2022-0570: Path Traversal in file editor on Windows in Gogs in gogs.io/gogs

  GO-2022-0583: Server-Side Request Forgery in gogs webhook in gogs.io/gogs

  GO-2022-0597: Cross-site Scripting in Gogs in gogs.io/gogs

  GO-2022-0749: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0788: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0797: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0822: Open Redirect in gogs.io/gogs

  GO-2022-1060: Gogs vulnerable to Cross-site Scripting in gogs.io/gogs

  GO-2023-1596: Gogs OS Command Injection vulnerability in gogs.io/gogs

  GO-2023-1971: Gogs and Gitea SSRF Vulnerability in code.gitea.io/gitea

  GO-2023-1972: Gogs XSS Vulnerability in gogs.io/gogs

  GO-2024-3275: Unpatched Remote Code Execution in Gogs in gogs.io/gogs

  GO-2024-3355: Remote Command Execution in file editing in gogs in gogs.io/gogs

  GO-2024-3356: Path Traversal in file update API in gogs in gogs.io/gogs

  GO-2025-3776: Gogs allows deletion of internal files which leads to remote command execution in gogs.io/gogs

  GO-2025-3778: Gogs XSS allowed by stored call in PDF renderer in gogs.io/gogs

Jun 10, 2017 GO-2022-0369 +24 more

  GO-2022-0369: Gogs vulnerable to improper PAM authorization handling in gogs.io/gogs

  GO-2022-0377: SSRF in repository migration in gogs.io/gogs

  GO-2022-0471: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0473: Cross site scripting via cookies in gogs in gogs.io/gogs

  GO-2022-0483: Cross-site Scripting vulnerability in repository issue list in Gogs in gogs.io/gogs

  GO-2022-0554: Unrestricted Upload of File with Dangerous Type in Gogs in gogs.io/gogs

  GO-2022-0556: OS Command Injection in file editor in Gogs in gogs.io/gogs

  GO-2022-0562: Path Traversal in Git HTTP endpoints in Gogs in gogs.io/gogs

  GO-2022-0566: SSRF in repository migration in gogs.io/gogs

  GO-2022-0570: Path Traversal in file editor on Windows in Gogs in gogs.io/gogs

  GO-2022-0583: Server-Side Request Forgery in gogs webhook in gogs.io/gogs

  GO-2022-0597: Cross-site Scripting in Gogs in gogs.io/gogs

  GO-2022-0749: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0788: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0797: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0822: Open Redirect in gogs.io/gogs

  GO-2022-1060: Gogs vulnerable to Cross-site Scripting in gogs.io/gogs

  GO-2023-1596: Gogs OS Command Injection vulnerability in gogs.io/gogs

  GO-2023-1971: Gogs and Gitea SSRF Vulnerability in code.gitea.io/gitea

  GO-2023-1972: Gogs XSS Vulnerability in gogs.io/gogs

  GO-2024-3275: Unpatched Remote Code Execution in Gogs in gogs.io/gogs

  GO-2024-3355: Remote Command Execution in file editing in gogs in gogs.io/gogs

  GO-2024-3356: Path Traversal in file update API in gogs in gogs.io/gogs

  GO-2025-3776: Gogs allows deletion of internal files which leads to remote command execution in gogs.io/gogs

  GO-2025-3778: Gogs XSS allowed by stored call in PDF renderer in gogs.io/gogs

Apr 5, 2017 GO-2022-0369 +24 more

  GO-2022-0369: Gogs vulnerable to improper PAM authorization handling in gogs.io/gogs

  GO-2022-0377: SSRF in repository migration in gogs.io/gogs

  GO-2022-0471: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0473: Cross site scripting via cookies in gogs in gogs.io/gogs

  GO-2022-0483: Cross-site Scripting vulnerability in repository issue list in Gogs in gogs.io/gogs

  GO-2022-0554: Unrestricted Upload of File with Dangerous Type in Gogs in gogs.io/gogs

  GO-2022-0556: OS Command Injection in file editor in Gogs in gogs.io/gogs

  GO-2022-0562: Path Traversal in Git HTTP endpoints in Gogs in gogs.io/gogs

  GO-2022-0566: SSRF in repository migration in gogs.io/gogs

  GO-2022-0570: Path Traversal in file editor on Windows in Gogs in gogs.io/gogs

  GO-2022-0583: Server-Side Request Forgery in gogs webhook in gogs.io/gogs

  GO-2022-0597: Cross-site Scripting in Gogs in gogs.io/gogs

  GO-2022-0749: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0788: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0797: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0822: Open Redirect in gogs.io/gogs

  GO-2022-1060: Gogs vulnerable to Cross-site Scripting in gogs.io/gogs

  GO-2023-1596: Gogs OS Command Injection vulnerability in gogs.io/gogs

  GO-2023-1971: Gogs and Gitea SSRF Vulnerability in code.gitea.io/gitea

  GO-2023-1972: Gogs XSS Vulnerability in gogs.io/gogs

  GO-2024-3275: Unpatched Remote Code Execution in Gogs in gogs.io/gogs

  GO-2024-3355: Remote Command Execution in file editing in gogs in gogs.io/gogs

  GO-2024-3356: Path Traversal in file update API in gogs in gogs.io/gogs

  GO-2025-3776: Gogs allows deletion of internal files which leads to remote command execution in gogs.io/gogs

  GO-2025-3778: Gogs XSS allowed by stored call in PDF renderer in gogs.io/gogs

Mar 14, 2017 GO-2022-0369 +24 more

  GO-2022-0369: Gogs vulnerable to improper PAM authorization handling in gogs.io/gogs

  GO-2022-0377: SSRF in repository migration in gogs.io/gogs

  GO-2022-0471: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0473: Cross site scripting via cookies in gogs in gogs.io/gogs

  GO-2022-0483: Cross-site Scripting vulnerability in repository issue list in Gogs in gogs.io/gogs

  GO-2022-0554: Unrestricted Upload of File with Dangerous Type in Gogs in gogs.io/gogs

  GO-2022-0556: OS Command Injection in file editor in Gogs in gogs.io/gogs

  GO-2022-0562: Path Traversal in Git HTTP endpoints in Gogs in gogs.io/gogs

  GO-2022-0566: SSRF in repository migration in gogs.io/gogs

  GO-2022-0570: Path Traversal in file editor on Windows in Gogs in gogs.io/gogs

  GO-2022-0583: Server-Side Request Forgery in gogs webhook in gogs.io/gogs

  GO-2022-0597: Cross-site Scripting in Gogs in gogs.io/gogs

  GO-2022-0749: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0788: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0797: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0822: Open Redirect in gogs.io/gogs

  GO-2022-1060: Gogs vulnerable to Cross-site Scripting in gogs.io/gogs

  GO-2023-1596: Gogs OS Command Injection vulnerability in gogs.io/gogs

  GO-2023-1971: Gogs and Gitea SSRF Vulnerability in code.gitea.io/gitea

  GO-2023-1972: Gogs XSS Vulnerability in gogs.io/gogs

  GO-2024-3275: Unpatched Remote Code Execution in Gogs in gogs.io/gogs

  GO-2024-3355: Remote Command Execution in file editing in gogs in gogs.io/gogs

  GO-2024-3356: Path Traversal in file update API in gogs in gogs.io/gogs

  GO-2025-3776: Gogs allows deletion of internal files which leads to remote command execution in gogs.io/gogs

  GO-2025-3778: Gogs XSS allowed by stored call in PDF renderer in gogs.io/gogs

Mar 7, 2017 GO-2022-0369 +24 more

  GO-2022-0369: Gogs vulnerable to improper PAM authorization handling in gogs.io/gogs

  GO-2022-0377: SSRF in repository migration in gogs.io/gogs

  GO-2022-0471: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0473: Cross site scripting via cookies in gogs in gogs.io/gogs

  GO-2022-0483: Cross-site Scripting vulnerability in repository issue list in Gogs in gogs.io/gogs

  GO-2022-0554: Unrestricted Upload of File with Dangerous Type in Gogs in gogs.io/gogs

  GO-2022-0556: OS Command Injection in file editor in Gogs in gogs.io/gogs

  GO-2022-0562: Path Traversal in Git HTTP endpoints in Gogs in gogs.io/gogs

  GO-2022-0566: SSRF in repository migration in gogs.io/gogs

  GO-2022-0570: Path Traversal in file editor on Windows in Gogs in gogs.io/gogs

  GO-2022-0583: Server-Side Request Forgery in gogs webhook in gogs.io/gogs

  GO-2022-0597: Cross-site Scripting in Gogs in gogs.io/gogs

  GO-2022-0749: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0788: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0797: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0822: Open Redirect in gogs.io/gogs

  GO-2022-1060: Gogs vulnerable to Cross-site Scripting in gogs.io/gogs

  GO-2023-1596: Gogs OS Command Injection vulnerability in gogs.io/gogs

  GO-2023-1971: Gogs and Gitea SSRF Vulnerability in code.gitea.io/gitea

  GO-2023-1972: Gogs XSS Vulnerability in gogs.io/gogs

  GO-2024-3275: Unpatched Remote Code Execution in Gogs in gogs.io/gogs

  GO-2024-3355: Remote Command Execution in file editing in gogs in gogs.io/gogs

  GO-2024-3356: Path Traversal in file update API in gogs in gogs.io/gogs

  GO-2025-3776: Gogs allows deletion of internal files which leads to remote command execution in gogs.io/gogs

  GO-2025-3778: Gogs XSS allowed by stored call in PDF renderer in gogs.io/gogs

Feb 28, 2017 GO-2022-0369 +24 more

  GO-2022-0369: Gogs vulnerable to improper PAM authorization handling in gogs.io/gogs

  GO-2022-0377: SSRF in repository migration in gogs.io/gogs

  GO-2022-0471: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0473: Cross site scripting via cookies in gogs in gogs.io/gogs

  GO-2022-0483: Cross-site Scripting vulnerability in repository issue list in Gogs in gogs.io/gogs

  GO-2022-0554: Unrestricted Upload of File with Dangerous Type in Gogs in gogs.io/gogs

  GO-2022-0556: OS Command Injection in file editor in Gogs in gogs.io/gogs

  GO-2022-0562: Path Traversal in Git HTTP endpoints in Gogs in gogs.io/gogs

  GO-2022-0566: SSRF in repository migration in gogs.io/gogs

  GO-2022-0570: Path Traversal in file editor on Windows in Gogs in gogs.io/gogs

  GO-2022-0583: Server-Side Request Forgery in gogs webhook in gogs.io/gogs

  GO-2022-0597: Cross-site Scripting in Gogs in gogs.io/gogs

  GO-2022-0749: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0788: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0797: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0822: Open Redirect in gogs.io/gogs

  GO-2022-1060: Gogs vulnerable to Cross-site Scripting in gogs.io/gogs

  GO-2023-1596: Gogs OS Command Injection vulnerability in gogs.io/gogs

  GO-2023-1971: Gogs and Gitea SSRF Vulnerability in code.gitea.io/gitea

  GO-2023-1972: Gogs XSS Vulnerability in gogs.io/gogs

  GO-2024-3275: Unpatched Remote Code Execution in Gogs in gogs.io/gogs

  GO-2024-3355: Remote Command Execution in file editing in gogs in gogs.io/gogs

  GO-2024-3356: Path Traversal in file update API in gogs in gogs.io/gogs

  GO-2025-3776: Gogs allows deletion of internal files which leads to remote command execution in gogs.io/gogs

  GO-2025-3778: Gogs XSS allowed by stored call in PDF renderer in gogs.io/gogs

Feb 11, 2017 GO-2022-0369 +24 more

  GO-2022-0369: Gogs vulnerable to improper PAM authorization handling in gogs.io/gogs

  GO-2022-0377: SSRF in repository migration in gogs.io/gogs

  GO-2022-0471: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0473: Cross site scripting via cookies in gogs in gogs.io/gogs

  GO-2022-0483: Cross-site Scripting vulnerability in repository issue list in Gogs in gogs.io/gogs

  GO-2022-0554: Unrestricted Upload of File with Dangerous Type in Gogs in gogs.io/gogs

  GO-2022-0556: OS Command Injection in file editor in Gogs in gogs.io/gogs

  GO-2022-0562: Path Traversal in Git HTTP endpoints in Gogs in gogs.io/gogs

  GO-2022-0566: SSRF in repository migration in gogs.io/gogs

  GO-2022-0570: Path Traversal in file editor on Windows in Gogs in gogs.io/gogs

  GO-2022-0583: Server-Side Request Forgery in gogs webhook in gogs.io/gogs

  GO-2022-0597: Cross-site Scripting in Gogs in gogs.io/gogs

  GO-2022-0749: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0788: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0797: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0822: Open Redirect in gogs.io/gogs

  GO-2022-1060: Gogs vulnerable to Cross-site Scripting in gogs.io/gogs

  GO-2023-1596: Gogs OS Command Injection vulnerability in gogs.io/gogs

  GO-2023-1971: Gogs and Gitea SSRF Vulnerability in code.gitea.io/gitea

  GO-2023-1972: Gogs XSS Vulnerability in gogs.io/gogs

  GO-2024-3275: Unpatched Remote Code Execution in Gogs in gogs.io/gogs

  GO-2024-3355: Remote Command Execution in file editing in gogs in gogs.io/gogs

  GO-2024-3356: Path Traversal in file update API in gogs in gogs.io/gogs

  GO-2025-3776: Gogs allows deletion of internal files which leads to remote command execution in gogs.io/gogs

  GO-2025-3778: Gogs XSS allowed by stored call in PDF renderer in gogs.io/gogs

Jan 31, 2017 GO-2022-0369 +24 more

  GO-2022-0369: Gogs vulnerable to improper PAM authorization handling in gogs.io/gogs

  GO-2022-0377: SSRF in repository migration in gogs.io/gogs

  GO-2022-0471: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0473: Cross site scripting via cookies in gogs in gogs.io/gogs

  GO-2022-0483: Cross-site Scripting vulnerability in repository issue list in Gogs in gogs.io/gogs

  GO-2022-0554: Unrestricted Upload of File with Dangerous Type in Gogs in gogs.io/gogs

  GO-2022-0556: OS Command Injection in file editor in Gogs in gogs.io/gogs

  GO-2022-0562: Path Traversal in Git HTTP endpoints in Gogs in gogs.io/gogs

  GO-2022-0566: SSRF in repository migration in gogs.io/gogs

  GO-2022-0570: Path Traversal in file editor on Windows in Gogs in gogs.io/gogs

  GO-2022-0583: Server-Side Request Forgery in gogs webhook in gogs.io/gogs

  GO-2022-0597: Cross-site Scripting in Gogs in gogs.io/gogs

  GO-2022-0749: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0788: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0797: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0822: Open Redirect in gogs.io/gogs

  GO-2022-1060: Gogs vulnerable to Cross-site Scripting in gogs.io/gogs

  GO-2023-1596: Gogs OS Command Injection vulnerability in gogs.io/gogs

  GO-2023-1971: Gogs and Gitea SSRF Vulnerability in code.gitea.io/gitea

  GO-2023-1972: Gogs XSS Vulnerability in gogs.io/gogs

  GO-2024-3275: Unpatched Remote Code Execution in Gogs in gogs.io/gogs

  GO-2024-3355: Remote Command Execution in file editing in gogs in gogs.io/gogs

  GO-2024-3356: Path Traversal in file update API in gogs in gogs.io/gogs

  GO-2025-3776: Gogs allows deletion of internal files which leads to remote command execution in gogs.io/gogs

  GO-2025-3778: Gogs XSS allowed by stored call in PDF renderer in gogs.io/gogs

Dec 24, 2016 GO-2022-0369 +24 more

  GO-2022-0369: Gogs vulnerable to improper PAM authorization handling in gogs.io/gogs

  GO-2022-0377: SSRF in repository migration in gogs.io/gogs

  GO-2022-0471: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0473: Cross site scripting via cookies in gogs in gogs.io/gogs

  GO-2022-0483: Cross-site Scripting vulnerability in repository issue list in Gogs in gogs.io/gogs

  GO-2022-0554: Unrestricted Upload of File with Dangerous Type in Gogs in gogs.io/gogs

  GO-2022-0556: OS Command Injection in file editor in Gogs in gogs.io/gogs

  GO-2022-0562: Path Traversal in Git HTTP endpoints in Gogs in gogs.io/gogs

  GO-2022-0566: SSRF in repository migration in gogs.io/gogs

  GO-2022-0570: Path Traversal in file editor on Windows in Gogs in gogs.io/gogs

  GO-2022-0583: Server-Side Request Forgery in gogs webhook in gogs.io/gogs

  GO-2022-0597: Cross-site Scripting in Gogs in gogs.io/gogs

  GO-2022-0749: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0788: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0797: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0822: Open Redirect in gogs.io/gogs

  GO-2022-1060: Gogs vulnerable to Cross-site Scripting in gogs.io/gogs

  GO-2023-1596: Gogs OS Command Injection vulnerability in gogs.io/gogs

  GO-2023-1971: Gogs and Gitea SSRF Vulnerability in code.gitea.io/gitea

  GO-2023-1972: Gogs XSS Vulnerability in gogs.io/gogs

  GO-2024-3275: Unpatched Remote Code Execution in Gogs in gogs.io/gogs

  GO-2024-3355: Remote Command Execution in file editing in gogs in gogs.io/gogs

  GO-2024-3356: Path Traversal in file update API in gogs in gogs.io/gogs

  GO-2025-3776: Gogs allows deletion of internal files which leads to remote command execution in gogs.io/gogs

  GO-2025-3778: Gogs XSS allowed by stored call in PDF renderer in gogs.io/gogs

Sep 1, 2016 GO-2022-0369 +24 more

  GO-2022-0369: Gogs vulnerable to improper PAM authorization handling in gogs.io/gogs

  GO-2022-0377: SSRF in repository migration in gogs.io/gogs

  GO-2022-0471: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0473: Cross site scripting via cookies in gogs in gogs.io/gogs

  GO-2022-0483: Cross-site Scripting vulnerability in repository issue list in Gogs in gogs.io/gogs

  GO-2022-0554: Unrestricted Upload of File with Dangerous Type in Gogs in gogs.io/gogs

  GO-2022-0556: OS Command Injection in file editor in Gogs in gogs.io/gogs

  GO-2022-0562: Path Traversal in Git HTTP endpoints in Gogs in gogs.io/gogs

  GO-2022-0566: SSRF in repository migration in gogs.io/gogs

  GO-2022-0570: Path Traversal in file editor on Windows in Gogs in gogs.io/gogs

  GO-2022-0583: Server-Side Request Forgery in gogs webhook in gogs.io/gogs

  GO-2022-0597: Cross-site Scripting in Gogs in gogs.io/gogs

  GO-2022-0749: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0788: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0797: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0822: Open Redirect in gogs.io/gogs

  GO-2022-1060: Gogs vulnerable to Cross-site Scripting in gogs.io/gogs

  GO-2023-1596: Gogs OS Command Injection vulnerability in gogs.io/gogs

  GO-2023-1971: Gogs and Gitea SSRF Vulnerability in code.gitea.io/gitea

  GO-2023-1972: Gogs XSS Vulnerability in gogs.io/gogs

  GO-2024-3275: Unpatched Remote Code Execution in Gogs in gogs.io/gogs

  GO-2024-3355: Remote Command Execution in file editing in gogs in gogs.io/gogs

  GO-2024-3356: Path Traversal in file update API in gogs in gogs.io/gogs

  GO-2025-3776: Gogs allows deletion of internal files which leads to remote command execution in gogs.io/gogs

  GO-2025-3778: Gogs XSS allowed by stored call in PDF renderer in gogs.io/gogs

Aug 10, 2016 GO-2022-0369 +24 more

  GO-2022-0369: Gogs vulnerable to improper PAM authorization handling in gogs.io/gogs

  GO-2022-0377: SSRF in repository migration in gogs.io/gogs

  GO-2022-0471: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0473: Cross site scripting via cookies in gogs in gogs.io/gogs

  GO-2022-0483: Cross-site Scripting vulnerability in repository issue list in Gogs in gogs.io/gogs

  GO-2022-0554: Unrestricted Upload of File with Dangerous Type in Gogs in gogs.io/gogs

  GO-2022-0556: OS Command Injection in file editor in Gogs in gogs.io/gogs

  GO-2022-0562: Path Traversal in Git HTTP endpoints in Gogs in gogs.io/gogs

  GO-2022-0566: SSRF in repository migration in gogs.io/gogs

  GO-2022-0570: Path Traversal in file editor on Windows in Gogs in gogs.io/gogs

  GO-2022-0583: Server-Side Request Forgery in gogs webhook in gogs.io/gogs

  GO-2022-0597: Cross-site Scripting in Gogs in gogs.io/gogs

  GO-2022-0749: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0788: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0797: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0822: Open Redirect in gogs.io/gogs

  GO-2022-1060: Gogs vulnerable to Cross-site Scripting in gogs.io/gogs

  GO-2023-1596: Gogs OS Command Injection vulnerability in gogs.io/gogs

  GO-2023-1971: Gogs and Gitea SSRF Vulnerability in code.gitea.io/gitea

  GO-2023-1972: Gogs XSS Vulnerability in gogs.io/gogs

  GO-2024-3275: Unpatched Remote Code Execution in Gogs in gogs.io/gogs

  GO-2024-3355: Remote Command Execution in file editing in gogs in gogs.io/gogs

  GO-2024-3356: Path Traversal in file update API in gogs in gogs.io/gogs

  GO-2025-3776: Gogs allows deletion of internal files which leads to remote command execution in gogs.io/gogs

  GO-2025-3778: Gogs XSS allowed by stored call in PDF renderer in gogs.io/gogs

Aug 3, 2016 GO-2022-0369 +24 more

  GO-2022-0369: Gogs vulnerable to improper PAM authorization handling in gogs.io/gogs

  GO-2022-0377: SSRF in repository migration in gogs.io/gogs

  GO-2022-0471: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0473: Cross site scripting via cookies in gogs in gogs.io/gogs

  GO-2022-0483: Cross-site Scripting vulnerability in repository issue list in Gogs in gogs.io/gogs

  GO-2022-0554: Unrestricted Upload of File with Dangerous Type in Gogs in gogs.io/gogs

  GO-2022-0556: OS Command Injection in file editor in Gogs in gogs.io/gogs

  GO-2022-0562: Path Traversal in Git HTTP endpoints in Gogs in gogs.io/gogs

  GO-2022-0566: SSRF in repository migration in gogs.io/gogs

  GO-2022-0570: Path Traversal in file editor on Windows in Gogs in gogs.io/gogs

  GO-2022-0583: Server-Side Request Forgery in gogs webhook in gogs.io/gogs

  GO-2022-0597: Cross-site Scripting in Gogs in gogs.io/gogs

  GO-2022-0749: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0788: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0797: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0822: Open Redirect in gogs.io/gogs

  GO-2022-1060: Gogs vulnerable to Cross-site Scripting in gogs.io/gogs

  GO-2023-1596: Gogs OS Command Injection vulnerability in gogs.io/gogs

  GO-2023-1971: Gogs and Gitea SSRF Vulnerability in code.gitea.io/gitea

  GO-2023-1972: Gogs XSS Vulnerability in gogs.io/gogs

  GO-2024-3275: Unpatched Remote Code Execution in Gogs in gogs.io/gogs

  GO-2024-3355: Remote Command Execution in file editing in gogs in gogs.io/gogs

  GO-2024-3356: Path Traversal in file update API in gogs in gogs.io/gogs

  GO-2025-3776: Gogs allows deletion of internal files which leads to remote command execution in gogs.io/gogs

  GO-2025-3778: Gogs XSS allowed by stored call in PDF renderer in gogs.io/gogs

Jul 22, 2016 GO-2022-0369 +24 more

  GO-2022-0369: Gogs vulnerable to improper PAM authorization handling in gogs.io/gogs

  GO-2022-0377: SSRF in repository migration in gogs.io/gogs

  GO-2022-0471: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0473: Cross site scripting via cookies in gogs in gogs.io/gogs

  GO-2022-0483: Cross-site Scripting vulnerability in repository issue list in Gogs in gogs.io/gogs

  GO-2022-0554: Unrestricted Upload of File with Dangerous Type in Gogs in gogs.io/gogs

  GO-2022-0556: OS Command Injection in file editor in Gogs in gogs.io/gogs

  GO-2022-0562: Path Traversal in Git HTTP endpoints in Gogs in gogs.io/gogs

  GO-2022-0566: SSRF in repository migration in gogs.io/gogs

  GO-2022-0570: Path Traversal in file editor on Windows in Gogs in gogs.io/gogs

  GO-2022-0583: Server-Side Request Forgery in gogs webhook in gogs.io/gogs

  GO-2022-0597: Cross-site Scripting in Gogs in gogs.io/gogs

  GO-2022-0749: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0788: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0797: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0822: Open Redirect in gogs.io/gogs

  GO-2022-1060: Gogs vulnerable to Cross-site Scripting in gogs.io/gogs

  GO-2023-1596: Gogs OS Command Injection vulnerability in gogs.io/gogs

  GO-2023-1971: Gogs and Gitea SSRF Vulnerability in code.gitea.io/gitea

  GO-2023-1972: Gogs XSS Vulnerability in gogs.io/gogs

  GO-2024-3275: Unpatched Remote Code Execution in Gogs in gogs.io/gogs

  GO-2024-3355: Remote Command Execution in file editing in gogs in gogs.io/gogs

  GO-2024-3356: Path Traversal in file update API in gogs in gogs.io/gogs

  GO-2025-3776: Gogs allows deletion of internal files which leads to remote command execution in gogs.io/gogs

  GO-2025-3778: Gogs XSS allowed by stored call in PDF renderer in gogs.io/gogs

Jul 17, 2016 GO-2022-0369 +24 more

  GO-2022-0369: Gogs vulnerable to improper PAM authorization handling in gogs.io/gogs

  GO-2022-0377: SSRF in repository migration in gogs.io/gogs

  GO-2022-0471: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0473: Cross site scripting via cookies in gogs in gogs.io/gogs

  GO-2022-0483: Cross-site Scripting vulnerability in repository issue list in Gogs in gogs.io/gogs

  GO-2022-0554: Unrestricted Upload of File with Dangerous Type in Gogs in gogs.io/gogs

  GO-2022-0556: OS Command Injection in file editor in Gogs in gogs.io/gogs

  GO-2022-0562: Path Traversal in Git HTTP endpoints in Gogs in gogs.io/gogs

  GO-2022-0566: SSRF in repository migration in gogs.io/gogs

  GO-2022-0570: Path Traversal in file editor on Windows in Gogs in gogs.io/gogs

  GO-2022-0583: Server-Side Request Forgery in gogs webhook in gogs.io/gogs

  GO-2022-0597: Cross-site Scripting in Gogs in gogs.io/gogs

  GO-2022-0749: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0788: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0797: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0822: Open Redirect in gogs.io/gogs

  GO-2022-1060: Gogs vulnerable to Cross-site Scripting in gogs.io/gogs

  GO-2023-1596: Gogs OS Command Injection vulnerability in gogs.io/gogs

  GO-2023-1971: Gogs and Gitea SSRF Vulnerability in code.gitea.io/gitea

  GO-2023-1972: Gogs XSS Vulnerability in gogs.io/gogs

  GO-2024-3275: Unpatched Remote Code Execution in Gogs in gogs.io/gogs

  GO-2024-3355: Remote Command Execution in file editing in gogs in gogs.io/gogs

  GO-2024-3356: Path Traversal in file update API in gogs in gogs.io/gogs

  GO-2025-3776: Gogs allows deletion of internal files which leads to remote command execution in gogs.io/gogs

  GO-2025-3778: Gogs XSS allowed by stored call in PDF renderer in gogs.io/gogs

Mar 19, 2016 GO-2022-0369 +24 more

  GO-2022-0369: Gogs vulnerable to improper PAM authorization handling in gogs.io/gogs

  GO-2022-0377: SSRF in repository migration in gogs.io/gogs

  GO-2022-0471: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0473: Cross site scripting via cookies in gogs in gogs.io/gogs

  GO-2022-0483: Cross-site Scripting vulnerability in repository issue list in Gogs in gogs.io/gogs

  GO-2022-0554: Unrestricted Upload of File with Dangerous Type in Gogs in gogs.io/gogs

  GO-2022-0556: OS Command Injection in file editor in Gogs in gogs.io/gogs

  GO-2022-0562: Path Traversal in Git HTTP endpoints in Gogs in gogs.io/gogs

  GO-2022-0566: SSRF in repository migration in gogs.io/gogs

  GO-2022-0570: Path Traversal in file editor on Windows in Gogs in gogs.io/gogs

  GO-2022-0583: Server-Side Request Forgery in gogs webhook in gogs.io/gogs

  GO-2022-0597: Cross-site Scripting in Gogs in gogs.io/gogs

  GO-2022-0749: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0788: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0797: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0822: Open Redirect in gogs.io/gogs

  GO-2022-1060: Gogs vulnerable to Cross-site Scripting in gogs.io/gogs

  GO-2023-1596: Gogs OS Command Injection vulnerability in gogs.io/gogs

  GO-2023-1971: Gogs and Gitea SSRF Vulnerability in code.gitea.io/gitea

  GO-2023-1972: Gogs XSS Vulnerability in gogs.io/gogs

  GO-2024-3275: Unpatched Remote Code Execution in Gogs in gogs.io/gogs

  GO-2024-3355: Remote Command Execution in file editing in gogs in gogs.io/gogs

  GO-2024-3356: Path Traversal in file update API in gogs in gogs.io/gogs

  GO-2025-3776: Gogs allows deletion of internal files which leads to remote command execution in gogs.io/gogs

  GO-2025-3778: Gogs XSS allowed by stored call in PDF renderer in gogs.io/gogs

Mar 7, 2016 GO-2022-0369 +24 more

  GO-2022-0369: Gogs vulnerable to improper PAM authorization handling in gogs.io/gogs

  GO-2022-0377: SSRF in repository migration in gogs.io/gogs

  GO-2022-0471: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0473: Cross site scripting via cookies in gogs in gogs.io/gogs

  GO-2022-0483: Cross-site Scripting vulnerability in repository issue list in Gogs in gogs.io/gogs

  GO-2022-0554: Unrestricted Upload of File with Dangerous Type in Gogs in gogs.io/gogs

  GO-2022-0556: OS Command Injection in file editor in Gogs in gogs.io/gogs

  GO-2022-0562: Path Traversal in Git HTTP endpoints in Gogs in gogs.io/gogs

  GO-2022-0566: SSRF in repository migration in gogs.io/gogs

  GO-2022-0570: Path Traversal in file editor on Windows in Gogs in gogs.io/gogs

  GO-2022-0583: Server-Side Request Forgery in gogs webhook in gogs.io/gogs

  GO-2022-0597: Cross-site Scripting in Gogs in gogs.io/gogs

  GO-2022-0749: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0788: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0797: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0822: Open Redirect in gogs.io/gogs

  GO-2022-1060: Gogs vulnerable to Cross-site Scripting in gogs.io/gogs

  GO-2023-1596: Gogs OS Command Injection vulnerability in gogs.io/gogs

  GO-2023-1971: Gogs and Gitea SSRF Vulnerability in code.gitea.io/gitea

  GO-2023-1972: Gogs XSS Vulnerability in gogs.io/gogs

  GO-2024-3275: Unpatched Remote Code Execution in Gogs in gogs.io/gogs

  GO-2024-3355: Remote Command Execution in file editing in gogs in gogs.io/gogs

  GO-2024-3356: Path Traversal in file update API in gogs in gogs.io/gogs

  GO-2025-3776: Gogs allows deletion of internal files which leads to remote command execution in gogs.io/gogs

  GO-2025-3778: Gogs XSS allowed by stored call in PDF renderer in gogs.io/gogs

Feb 24, 2016 GO-2022-0369 +24 more

  GO-2022-0369: Gogs vulnerable to improper PAM authorization handling in gogs.io/gogs

  GO-2022-0377: SSRF in repository migration in gogs.io/gogs

  GO-2022-0471: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0473: Cross site scripting via cookies in gogs in gogs.io/gogs

  GO-2022-0483: Cross-site Scripting vulnerability in repository issue list in Gogs in gogs.io/gogs

  GO-2022-0554: Unrestricted Upload of File with Dangerous Type in Gogs in gogs.io/gogs

  GO-2022-0556: OS Command Injection in file editor in Gogs in gogs.io/gogs

  GO-2022-0562: Path Traversal in Git HTTP endpoints in Gogs in gogs.io/gogs

  GO-2022-0566: SSRF in repository migration in gogs.io/gogs

  GO-2022-0570: Path Traversal in file editor on Windows in Gogs in gogs.io/gogs

  GO-2022-0583: Server-Side Request Forgery in gogs webhook in gogs.io/gogs

  GO-2022-0597: Cross-site Scripting in Gogs in gogs.io/gogs

  GO-2022-0749: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0788: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0797: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0822: Open Redirect in gogs.io/gogs

  GO-2022-1060: Gogs vulnerable to Cross-site Scripting in gogs.io/gogs

  GO-2023-1596: Gogs OS Command Injection vulnerability in gogs.io/gogs

  GO-2023-1971: Gogs and Gitea SSRF Vulnerability in code.gitea.io/gitea

  GO-2023-1972: Gogs XSS Vulnerability in gogs.io/gogs

  GO-2024-3275: Unpatched Remote Code Execution in Gogs in gogs.io/gogs

  GO-2024-3355: Remote Command Execution in file editing in gogs in gogs.io/gogs

  GO-2024-3356: Path Traversal in file update API in gogs in gogs.io/gogs

  GO-2025-3776: Gogs allows deletion of internal files which leads to remote command execution in gogs.io/gogs

  GO-2025-3778: Gogs XSS allowed by stored call in PDF renderer in gogs.io/gogs

Jan 30, 2016 GO-2022-0369 +24 more

  GO-2022-0369: Gogs vulnerable to improper PAM authorization handling in gogs.io/gogs

  GO-2022-0377: SSRF in repository migration in gogs.io/gogs

  GO-2022-0471: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0473: Cross site scripting via cookies in gogs in gogs.io/gogs

  GO-2022-0483: Cross-site Scripting vulnerability in repository issue list in Gogs in gogs.io/gogs

  GO-2022-0554: Unrestricted Upload of File with Dangerous Type in Gogs in gogs.io/gogs

  GO-2022-0556: OS Command Injection in file editor in Gogs in gogs.io/gogs

  GO-2022-0562: Path Traversal in Git HTTP endpoints in Gogs in gogs.io/gogs

  GO-2022-0566: SSRF in repository migration in gogs.io/gogs

  GO-2022-0570: Path Traversal in file editor on Windows in Gogs in gogs.io/gogs

  GO-2022-0583: Server-Side Request Forgery in gogs webhook in gogs.io/gogs

  GO-2022-0597: Cross-site Scripting in Gogs in gogs.io/gogs

  GO-2022-0749: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0788: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0797: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0822: Open Redirect in gogs.io/gogs

  GO-2022-1060: Gogs vulnerable to Cross-site Scripting in gogs.io/gogs

  GO-2023-1596: Gogs OS Command Injection vulnerability in gogs.io/gogs

  GO-2023-1971: Gogs and Gitea SSRF Vulnerability in code.gitea.io/gitea

  GO-2023-1972: Gogs XSS Vulnerability in gogs.io/gogs

  GO-2024-3275: Unpatched Remote Code Execution in Gogs in gogs.io/gogs

  GO-2024-3355: Remote Command Execution in file editing in gogs in gogs.io/gogs

  GO-2024-3356: Path Traversal in file update API in gogs in gogs.io/gogs

  GO-2025-3776: Gogs allows deletion of internal files which leads to remote command execution in gogs.io/gogs

  GO-2025-3778: Gogs XSS allowed by stored call in PDF renderer in gogs.io/gogs

Dec 18, 2015 GO-2022-0369 +24 more

  GO-2022-0369: Gogs vulnerable to improper PAM authorization handling in gogs.io/gogs

  GO-2022-0377: SSRF in repository migration in gogs.io/gogs

  GO-2022-0471: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0473: Cross site scripting via cookies in gogs in gogs.io/gogs

  GO-2022-0483: Cross-site Scripting vulnerability in repository issue list in Gogs in gogs.io/gogs

  GO-2022-0554: Unrestricted Upload of File with Dangerous Type in Gogs in gogs.io/gogs

  GO-2022-0556: OS Command Injection in file editor in Gogs in gogs.io/gogs

  GO-2022-0562: Path Traversal in Git HTTP endpoints in Gogs in gogs.io/gogs

  GO-2022-0566: SSRF in repository migration in gogs.io/gogs

  GO-2022-0570: Path Traversal in file editor on Windows in Gogs in gogs.io/gogs

  GO-2022-0583: Server-Side Request Forgery in gogs webhook in gogs.io/gogs

  GO-2022-0597: Cross-site Scripting in Gogs in gogs.io/gogs

  GO-2022-0749: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0788: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0797: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0822: Open Redirect in gogs.io/gogs

  GO-2022-1060: Gogs vulnerable to Cross-site Scripting in gogs.io/gogs

  GO-2023-1596: Gogs OS Command Injection vulnerability in gogs.io/gogs

  GO-2023-1971: Gogs and Gitea SSRF Vulnerability in code.gitea.io/gitea

  GO-2023-1972: Gogs XSS Vulnerability in gogs.io/gogs

  GO-2024-3275: Unpatched Remote Code Execution in Gogs in gogs.io/gogs

  GO-2024-3355: Remote Command Execution in file editing in gogs in gogs.io/gogs

  GO-2024-3356: Path Traversal in file update API in gogs in gogs.io/gogs

  GO-2025-3776: Gogs allows deletion of internal files which leads to remote command execution in gogs.io/gogs

  GO-2025-3778: Gogs XSS allowed by stored call in PDF renderer in gogs.io/gogs

Dec 13, 2015 GO-2022-0369 +24 more

  GO-2022-0369: Gogs vulnerable to improper PAM authorization handling in gogs.io/gogs

  GO-2022-0377: SSRF in repository migration in gogs.io/gogs

  GO-2022-0471: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0473: Cross site scripting via cookies in gogs in gogs.io/gogs

  GO-2022-0483: Cross-site Scripting vulnerability in repository issue list in Gogs in gogs.io/gogs

  GO-2022-0554: Unrestricted Upload of File with Dangerous Type in Gogs in gogs.io/gogs

  GO-2022-0556: OS Command Injection in file editor in Gogs in gogs.io/gogs

  GO-2022-0562: Path Traversal in Git HTTP endpoints in Gogs in gogs.io/gogs

  GO-2022-0566: SSRF in repository migration in gogs.io/gogs

  GO-2022-0570: Path Traversal in file editor on Windows in Gogs in gogs.io/gogs

  GO-2022-0583: Server-Side Request Forgery in gogs webhook in gogs.io/gogs

  GO-2022-0597: Cross-site Scripting in Gogs in gogs.io/gogs

  GO-2022-0749: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0788: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0797: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0822: Open Redirect in gogs.io/gogs

  GO-2022-1060: Gogs vulnerable to Cross-site Scripting in gogs.io/gogs

  GO-2023-1596: Gogs OS Command Injection vulnerability in gogs.io/gogs

  GO-2023-1971: Gogs and Gitea SSRF Vulnerability in code.gitea.io/gitea

  GO-2023-1972: Gogs XSS Vulnerability in gogs.io/gogs

  GO-2024-3275: Unpatched Remote Code Execution in Gogs in gogs.io/gogs

  GO-2024-3355: Remote Command Execution in file editing in gogs in gogs.io/gogs

  GO-2024-3356: Path Traversal in file update API in gogs in gogs.io/gogs

  GO-2025-3776: Gogs allows deletion of internal files which leads to remote command execution in gogs.io/gogs

  GO-2025-3778: Gogs XSS allowed by stored call in PDF renderer in gogs.io/gogs

Dec 6, 2015 GO-2022-0369 +24 more

  GO-2022-0369: Gogs vulnerable to improper PAM authorization handling in gogs.io/gogs

  GO-2022-0377: SSRF in repository migration in gogs.io/gogs

  GO-2022-0471: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0473: Cross site scripting via cookies in gogs in gogs.io/gogs

  GO-2022-0483: Cross-site Scripting vulnerability in repository issue list in Gogs in gogs.io/gogs

  GO-2022-0554: Unrestricted Upload of File with Dangerous Type in Gogs in gogs.io/gogs

  GO-2022-0556: OS Command Injection in file editor in Gogs in gogs.io/gogs

  GO-2022-0562: Path Traversal in Git HTTP endpoints in Gogs in gogs.io/gogs

  GO-2022-0566: SSRF in repository migration in gogs.io/gogs

  GO-2022-0570: Path Traversal in file editor on Windows in Gogs in gogs.io/gogs

  GO-2022-0583: Server-Side Request Forgery in gogs webhook in gogs.io/gogs

  GO-2022-0597: Cross-site Scripting in Gogs in gogs.io/gogs

  GO-2022-0749: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0788: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0797: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0822: Open Redirect in gogs.io/gogs

  GO-2022-1060: Gogs vulnerable to Cross-site Scripting in gogs.io/gogs

  GO-2023-1596: Gogs OS Command Injection vulnerability in gogs.io/gogs

  GO-2023-1971: Gogs and Gitea SSRF Vulnerability in code.gitea.io/gitea

  GO-2023-1972: Gogs XSS Vulnerability in gogs.io/gogs

  GO-2024-3275: Unpatched Remote Code Execution in Gogs in gogs.io/gogs

  GO-2024-3355: Remote Command Execution in file editing in gogs in gogs.io/gogs

  GO-2024-3356: Path Traversal in file update API in gogs in gogs.io/gogs

  GO-2025-3776: Gogs allows deletion of internal files which leads to remote command execution in gogs.io/gogs

  GO-2025-3778: Gogs XSS allowed by stored call in PDF renderer in gogs.io/gogs

Nov 25, 2015 GO-2022-0369 +24 more

  GO-2022-0369: Gogs vulnerable to improper PAM authorization handling in gogs.io/gogs

  GO-2022-0377: SSRF in repository migration in gogs.io/gogs

  GO-2022-0471: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0473: Cross site scripting via cookies in gogs in gogs.io/gogs

  GO-2022-0483: Cross-site Scripting vulnerability in repository issue list in Gogs in gogs.io/gogs

  GO-2022-0554: Unrestricted Upload of File with Dangerous Type in Gogs in gogs.io/gogs

  GO-2022-0556: OS Command Injection in file editor in Gogs in gogs.io/gogs

  GO-2022-0562: Path Traversal in Git HTTP endpoints in Gogs in gogs.io/gogs

  GO-2022-0566: SSRF in repository migration in gogs.io/gogs

  GO-2022-0570: Path Traversal in file editor on Windows in Gogs in gogs.io/gogs

  GO-2022-0583: Server-Side Request Forgery in gogs webhook in gogs.io/gogs

  GO-2022-0597: Cross-site Scripting in Gogs in gogs.io/gogs

  GO-2022-0749: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0788: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0797: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0822: Open Redirect in gogs.io/gogs

  GO-2022-1060: Gogs vulnerable to Cross-site Scripting in gogs.io/gogs

  GO-2023-1596: Gogs OS Command Injection vulnerability in gogs.io/gogs

  GO-2023-1971: Gogs and Gitea SSRF Vulnerability in code.gitea.io/gitea

  GO-2023-1972: Gogs XSS Vulnerability in gogs.io/gogs

  GO-2024-3275: Unpatched Remote Code Execution in Gogs in gogs.io/gogs

  GO-2024-3355: Remote Command Execution in file editing in gogs in gogs.io/gogs

  GO-2024-3356: Path Traversal in file update API in gogs in gogs.io/gogs

  GO-2025-3776: Gogs allows deletion of internal files which leads to remote command execution in gogs.io/gogs

  GO-2025-3778: Gogs XSS allowed by stored call in PDF renderer in gogs.io/gogs

Nov 21, 2015 GO-2022-0369 +24 more

  GO-2022-0369: Gogs vulnerable to improper PAM authorization handling in gogs.io/gogs

  GO-2022-0377: SSRF in repository migration in gogs.io/gogs

  GO-2022-0471: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0473: Cross site scripting via cookies in gogs in gogs.io/gogs

  GO-2022-0483: Cross-site Scripting vulnerability in repository issue list in Gogs in gogs.io/gogs

  GO-2022-0554: Unrestricted Upload of File with Dangerous Type in Gogs in gogs.io/gogs

  GO-2022-0556: OS Command Injection in file editor in Gogs in gogs.io/gogs

  GO-2022-0562: Path Traversal in Git HTTP endpoints in Gogs in gogs.io/gogs

  GO-2022-0566: SSRF in repository migration in gogs.io/gogs

  GO-2022-0570: Path Traversal in file editor on Windows in Gogs in gogs.io/gogs

  GO-2022-0583: Server-Side Request Forgery in gogs webhook in gogs.io/gogs

  GO-2022-0597: Cross-site Scripting in Gogs in gogs.io/gogs

  GO-2022-0749: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0788: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0797: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0822: Open Redirect in gogs.io/gogs

  GO-2022-1060: Gogs vulnerable to Cross-site Scripting in gogs.io/gogs

  GO-2023-1596: Gogs OS Command Injection vulnerability in gogs.io/gogs

  GO-2023-1971: Gogs and Gitea SSRF Vulnerability in code.gitea.io/gitea

  GO-2023-1972: Gogs XSS Vulnerability in gogs.io/gogs

  GO-2024-3275: Unpatched Remote Code Execution in Gogs in gogs.io/gogs

  GO-2024-3355: Remote Command Execution in file editing in gogs in gogs.io/gogs

  GO-2024-3356: Path Traversal in file update API in gogs in gogs.io/gogs

  GO-2025-3776: Gogs allows deletion of internal files which leads to remote command execution in gogs.io/gogs

  GO-2025-3778: Gogs XSS allowed by stored call in PDF renderer in gogs.io/gogs

Nov 12, 2015 GO-2022-0369 +24 more

  GO-2022-0369: Gogs vulnerable to improper PAM authorization handling in gogs.io/gogs

  GO-2022-0377: SSRF in repository migration in gogs.io/gogs

  GO-2022-0471: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0473: Cross site scripting via cookies in gogs in gogs.io/gogs

  GO-2022-0483: Cross-site Scripting vulnerability in repository issue list in Gogs in gogs.io/gogs

  GO-2022-0554: Unrestricted Upload of File with Dangerous Type in Gogs in gogs.io/gogs

  GO-2022-0556: OS Command Injection in file editor in Gogs in gogs.io/gogs

  GO-2022-0562: Path Traversal in Git HTTP endpoints in Gogs in gogs.io/gogs

  GO-2022-0566: SSRF in repository migration in gogs.io/gogs

  GO-2022-0570: Path Traversal in file editor on Windows in Gogs in gogs.io/gogs

  GO-2022-0583: Server-Side Request Forgery in gogs webhook in gogs.io/gogs

  GO-2022-0597: Cross-site Scripting in Gogs in gogs.io/gogs

  GO-2022-0749: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0788: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0797: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0822: Open Redirect in gogs.io/gogs

  GO-2022-1060: Gogs vulnerable to Cross-site Scripting in gogs.io/gogs

  GO-2023-1596: Gogs OS Command Injection vulnerability in gogs.io/gogs

  GO-2023-1971: Gogs and Gitea SSRF Vulnerability in code.gitea.io/gitea

  GO-2023-1972: Gogs XSS Vulnerability in gogs.io/gogs

  GO-2024-3275: Unpatched Remote Code Execution in Gogs in gogs.io/gogs

  GO-2024-3355: Remote Command Execution in file editing in gogs in gogs.io/gogs

  GO-2024-3356: Path Traversal in file update API in gogs in gogs.io/gogs

  GO-2025-3776: Gogs allows deletion of internal files which leads to remote command execution in gogs.io/gogs

  GO-2025-3778: Gogs XSS allowed by stored call in PDF renderer in gogs.io/gogs

Nov 8, 2015 GO-2022-0369 +24 more

  GO-2022-0369: Gogs vulnerable to improper PAM authorization handling in gogs.io/gogs

  GO-2022-0377: SSRF in repository migration in gogs.io/gogs

  GO-2022-0471: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0473: Cross site scripting via cookies in gogs in gogs.io/gogs

  GO-2022-0483: Cross-site Scripting vulnerability in repository issue list in Gogs in gogs.io/gogs

  GO-2022-0554: Unrestricted Upload of File with Dangerous Type in Gogs in gogs.io/gogs

  GO-2022-0556: OS Command Injection in file editor in Gogs in gogs.io/gogs

  GO-2022-0562: Path Traversal in Git HTTP endpoints in Gogs in gogs.io/gogs

  GO-2022-0566: SSRF in repository migration in gogs.io/gogs

  GO-2022-0570: Path Traversal in file editor on Windows in Gogs in gogs.io/gogs

  GO-2022-0583: Server-Side Request Forgery in gogs webhook in gogs.io/gogs

  GO-2022-0597: Cross-site Scripting in Gogs in gogs.io/gogs

  GO-2022-0749: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0788: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0797: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0822: Open Redirect in gogs.io/gogs

  GO-2022-1060: Gogs vulnerable to Cross-site Scripting in gogs.io/gogs

  GO-2023-1596: Gogs OS Command Injection vulnerability in gogs.io/gogs

  GO-2023-1971: Gogs and Gitea SSRF Vulnerability in code.gitea.io/gitea

  GO-2023-1972: Gogs XSS Vulnerability in gogs.io/gogs

  GO-2024-3275: Unpatched Remote Code Execution in Gogs in gogs.io/gogs

  GO-2024-3355: Remote Command Execution in file editing in gogs in gogs.io/gogs

  GO-2024-3356: Path Traversal in file update API in gogs in gogs.io/gogs

  GO-2025-3776: Gogs allows deletion of internal files which leads to remote command execution in gogs.io/gogs

  GO-2025-3778: Gogs XSS allowed by stored call in PDF renderer in gogs.io/gogs

Sep 26, 2015 GO-2022-0369 +24 more

  GO-2022-0369: Gogs vulnerable to improper PAM authorization handling in gogs.io/gogs

  GO-2022-0377: SSRF in repository migration in gogs.io/gogs

  GO-2022-0471: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0473: Cross site scripting via cookies in gogs in gogs.io/gogs

  GO-2022-0483: Cross-site Scripting vulnerability in repository issue list in Gogs in gogs.io/gogs

  GO-2022-0554: Unrestricted Upload of File with Dangerous Type in Gogs in gogs.io/gogs

  GO-2022-0556: OS Command Injection in file editor in Gogs in gogs.io/gogs

  GO-2022-0562: Path Traversal in Git HTTP endpoints in Gogs in gogs.io/gogs

  GO-2022-0566: SSRF in repository migration in gogs.io/gogs

  GO-2022-0570: Path Traversal in file editor on Windows in Gogs in gogs.io/gogs

  GO-2022-0583: Server-Side Request Forgery in gogs webhook in gogs.io/gogs

  GO-2022-0597: Cross-site Scripting in Gogs in gogs.io/gogs

  GO-2022-0749: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0788: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0797: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0822: Open Redirect in gogs.io/gogs

  GO-2022-1060: Gogs vulnerable to Cross-site Scripting in gogs.io/gogs

  GO-2023-1596: Gogs OS Command Injection vulnerability in gogs.io/gogs

  GO-2023-1971: Gogs and Gitea SSRF Vulnerability in code.gitea.io/gitea

  GO-2023-1972: Gogs XSS Vulnerability in gogs.io/gogs

  GO-2024-3275: Unpatched Remote Code Execution in Gogs in gogs.io/gogs

  GO-2024-3355: Remote Command Execution in file editing in gogs in gogs.io/gogs

  GO-2024-3356: Path Traversal in file update API in gogs in gogs.io/gogs

  GO-2025-3776: Gogs allows deletion of internal files which leads to remote command execution in gogs.io/gogs

  GO-2025-3778: Gogs XSS allowed by stored call in PDF renderer in gogs.io/gogs

Sep 5, 2015 GO-2022-0369 +24 more

  GO-2022-0369: Gogs vulnerable to improper PAM authorization handling in gogs.io/gogs

  GO-2022-0377: SSRF in repository migration in gogs.io/gogs

  GO-2022-0471: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0473: Cross site scripting via cookies in gogs in gogs.io/gogs

  GO-2022-0483: Cross-site Scripting vulnerability in repository issue list in Gogs in gogs.io/gogs

  GO-2022-0554: Unrestricted Upload of File with Dangerous Type in Gogs in gogs.io/gogs

  GO-2022-0556: OS Command Injection in file editor in Gogs in gogs.io/gogs

  GO-2022-0562: Path Traversal in Git HTTP endpoints in Gogs in gogs.io/gogs

  GO-2022-0566: SSRF in repository migration in gogs.io/gogs

  GO-2022-0570: Path Traversal in file editor on Windows in Gogs in gogs.io/gogs

  GO-2022-0583: Server-Side Request Forgery in gogs webhook in gogs.io/gogs

  GO-2022-0597: Cross-site Scripting in Gogs in gogs.io/gogs

  GO-2022-0749: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0788: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0797: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0822: Open Redirect in gogs.io/gogs

  GO-2022-1060: Gogs vulnerable to Cross-site Scripting in gogs.io/gogs

  GO-2023-1596: Gogs OS Command Injection vulnerability in gogs.io/gogs

  GO-2023-1971: Gogs and Gitea SSRF Vulnerability in code.gitea.io/gitea

  GO-2023-1972: Gogs XSS Vulnerability in gogs.io/gogs

  GO-2024-3275: Unpatched Remote Code Execution in Gogs in gogs.io/gogs

  GO-2024-3355: Remote Command Execution in file editing in gogs in gogs.io/gogs

  GO-2024-3356: Path Traversal in file update API in gogs in gogs.io/gogs

  GO-2025-3776: Gogs allows deletion of internal files which leads to remote command execution in gogs.io/gogs

  GO-2025-3778: Gogs XSS allowed by stored call in PDF renderer in gogs.io/gogs

Aug 16, 2015 GO-2022-0369 +24 more

  GO-2022-0369: Gogs vulnerable to improper PAM authorization handling in gogs.io/gogs

  GO-2022-0377: SSRF in repository migration in gogs.io/gogs

  GO-2022-0471: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0473: Cross site scripting via cookies in gogs in gogs.io/gogs

  GO-2022-0483: Cross-site Scripting vulnerability in repository issue list in Gogs in gogs.io/gogs

  GO-2022-0554: Unrestricted Upload of File with Dangerous Type in Gogs in gogs.io/gogs

  GO-2022-0556: OS Command Injection in file editor in Gogs in gogs.io/gogs

  GO-2022-0562: Path Traversal in Git HTTP endpoints in Gogs in gogs.io/gogs

  GO-2022-0566: SSRF in repository migration in gogs.io/gogs

  GO-2022-0570: Path Traversal in file editor on Windows in Gogs in gogs.io/gogs

  GO-2022-0583: Server-Side Request Forgery in gogs webhook in gogs.io/gogs

  GO-2022-0597: Cross-site Scripting in Gogs in gogs.io/gogs

  GO-2022-0749: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0788: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0797: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0822: Open Redirect in gogs.io/gogs

  GO-2022-1060: Gogs vulnerable to Cross-site Scripting in gogs.io/gogs

  GO-2023-1596: Gogs OS Command Injection vulnerability in gogs.io/gogs

  GO-2023-1971: Gogs and Gitea SSRF Vulnerability in code.gitea.io/gitea

  GO-2023-1972: Gogs XSS Vulnerability in gogs.io/gogs

  GO-2024-3275: Unpatched Remote Code Execution in Gogs in gogs.io/gogs

  GO-2024-3355: Remote Command Execution in file editing in gogs in gogs.io/gogs

  GO-2024-3356: Path Traversal in file update API in gogs in gogs.io/gogs

  GO-2025-3776: Gogs allows deletion of internal files which leads to remote command execution in gogs.io/gogs

  GO-2025-3778: Gogs XSS allowed by stored call in PDF renderer in gogs.io/gogs

Aug 2, 2015 GO-2022-0369 +23 more

  GO-2022-0369: Gogs vulnerable to improper PAM authorization handling in gogs.io/gogs

  GO-2022-0377: SSRF in repository migration in gogs.io/gogs

  GO-2022-0471: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0473: Cross site scripting via cookies in gogs in gogs.io/gogs

  GO-2022-0483: Cross-site Scripting vulnerability in repository issue list in Gogs in gogs.io/gogs

  GO-2022-0554: Unrestricted Upload of File with Dangerous Type in Gogs in gogs.io/gogs

  GO-2022-0556: OS Command Injection in file editor in Gogs in gogs.io/gogs

  GO-2022-0562: Path Traversal in Git HTTP endpoints in Gogs in gogs.io/gogs

  GO-2022-0566: SSRF in repository migration in gogs.io/gogs

  GO-2022-0570: Path Traversal in file editor on Windows in Gogs in gogs.io/gogs

  GO-2022-0583: Server-Side Request Forgery in gogs webhook in gogs.io/gogs

  GO-2022-0597: Cross-site Scripting in Gogs in gogs.io/gogs

  GO-2022-0749: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0788: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0797: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0822: Open Redirect in gogs.io/gogs

  GO-2023-1596: Gogs OS Command Injection vulnerability in gogs.io/gogs

  GO-2023-1971: Gogs and Gitea SSRF Vulnerability in code.gitea.io/gitea

  GO-2023-1972: Gogs XSS Vulnerability in gogs.io/gogs

  GO-2024-3275: Unpatched Remote Code Execution in Gogs in gogs.io/gogs

  GO-2024-3355: Remote Command Execution in file editing in gogs in gogs.io/gogs

  GO-2024-3356: Path Traversal in file update API in gogs in gogs.io/gogs

  GO-2025-3776: Gogs allows deletion of internal files which leads to remote command execution in gogs.io/gogs

  GO-2025-3778: Gogs XSS allowed by stored call in PDF renderer in gogs.io/gogs

Mar 26, 2015 GO-2022-0369 +23 more

  GO-2022-0369: Gogs vulnerable to improper PAM authorization handling in gogs.io/gogs

  GO-2022-0377: SSRF in repository migration in gogs.io/gogs

  GO-2022-0471: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0473: Cross site scripting via cookies in gogs in gogs.io/gogs

  GO-2022-0483: Cross-site Scripting vulnerability in repository issue list in Gogs in gogs.io/gogs

  GO-2022-0554: Unrestricted Upload of File with Dangerous Type in Gogs in gogs.io/gogs

  GO-2022-0556: OS Command Injection in file editor in Gogs in gogs.io/gogs

  GO-2022-0562: Path Traversal in Git HTTP endpoints in Gogs in gogs.io/gogs

  GO-2022-0566: SSRF in repository migration in gogs.io/gogs

  GO-2022-0570: Path Traversal in file editor on Windows in Gogs in gogs.io/gogs

  GO-2022-0583: Server-Side Request Forgery in gogs webhook in gogs.io/gogs

  GO-2022-0597: Cross-site Scripting in Gogs in gogs.io/gogs

  GO-2022-0749: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0788: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0797: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0822: Open Redirect in gogs.io/gogs

  GO-2023-1596: Gogs OS Command Injection vulnerability in gogs.io/gogs

  GO-2023-1971: Gogs and Gitea SSRF Vulnerability in code.gitea.io/gitea

  GO-2023-1972: Gogs XSS Vulnerability in gogs.io/gogs

  GO-2024-3275: Unpatched Remote Code Execution in Gogs in gogs.io/gogs

  GO-2024-3355: Remote Command Execution in file editing in gogs in gogs.io/gogs

  GO-2024-3356: Path Traversal in file update API in gogs in gogs.io/gogs

  GO-2025-3776: Gogs allows deletion of internal files which leads to remote command execution in gogs.io/gogs

  GO-2025-3778: Gogs XSS allowed by stored call in PDF renderer in gogs.io/gogs

Mar 19, 2015 GO-2022-0369 +23 more

  GO-2022-0369: Gogs vulnerable to improper PAM authorization handling in gogs.io/gogs

  GO-2022-0377: SSRF in repository migration in gogs.io/gogs

  GO-2022-0471: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0473: Cross site scripting via cookies in gogs in gogs.io/gogs

  GO-2022-0483: Cross-site Scripting vulnerability in repository issue list in Gogs in gogs.io/gogs

  GO-2022-0554: Unrestricted Upload of File with Dangerous Type in Gogs in gogs.io/gogs

  GO-2022-0556: OS Command Injection in file editor in Gogs in gogs.io/gogs

  GO-2022-0562: Path Traversal in Git HTTP endpoints in Gogs in gogs.io/gogs

  GO-2022-0566: SSRF in repository migration in gogs.io/gogs

  GO-2022-0570: Path Traversal in file editor on Windows in Gogs in gogs.io/gogs

  GO-2022-0583: Server-Side Request Forgery in gogs webhook in gogs.io/gogs

  GO-2022-0597: Cross-site Scripting in Gogs in gogs.io/gogs

  GO-2022-0749: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0788: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0797: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0822: Open Redirect in gogs.io/gogs

  GO-2023-1596: Gogs OS Command Injection vulnerability in gogs.io/gogs

  GO-2023-1971: Gogs and Gitea SSRF Vulnerability in code.gitea.io/gitea

  GO-2023-1972: Gogs XSS Vulnerability in gogs.io/gogs

  GO-2024-3275: Unpatched Remote Code Execution in Gogs in gogs.io/gogs

  GO-2024-3355: Remote Command Execution in file editing in gogs in gogs.io/gogs

  GO-2024-3356: Path Traversal in file update API in gogs in gogs.io/gogs

  GO-2025-3776: Gogs allows deletion of internal files which leads to remote command execution in gogs.io/gogs

  GO-2025-3778: Gogs XSS allowed by stored call in PDF renderer in gogs.io/gogs

Feb 13, 2015 GO-2022-0369 +23 more

  GO-2022-0369: Gogs vulnerable to improper PAM authorization handling in gogs.io/gogs

  GO-2022-0377: SSRF in repository migration in gogs.io/gogs

  GO-2022-0471: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0473: Cross site scripting via cookies in gogs in gogs.io/gogs

  GO-2022-0483: Cross-site Scripting vulnerability in repository issue list in Gogs in gogs.io/gogs

  GO-2022-0554: Unrestricted Upload of File with Dangerous Type in Gogs in gogs.io/gogs

  GO-2022-0556: OS Command Injection in file editor in Gogs in gogs.io/gogs

  GO-2022-0562: Path Traversal in Git HTTP endpoints in Gogs in gogs.io/gogs

  GO-2022-0566: SSRF in repository migration in gogs.io/gogs

  GO-2022-0570: Path Traversal in file editor on Windows in Gogs in gogs.io/gogs

  GO-2022-0583: Server-Side Request Forgery in gogs webhook in gogs.io/gogs

  GO-2022-0597: Cross-site Scripting in Gogs in gogs.io/gogs

  GO-2022-0749: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0788: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0797: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0822: Open Redirect in gogs.io/gogs

  GO-2023-1596: Gogs OS Command Injection vulnerability in gogs.io/gogs

  GO-2023-1971: Gogs and Gitea SSRF Vulnerability in code.gitea.io/gitea

  GO-2023-1972: Gogs XSS Vulnerability in gogs.io/gogs

  GO-2024-3275: Unpatched Remote Code Execution in Gogs in gogs.io/gogs

  GO-2024-3355: Remote Command Execution in file editing in gogs in gogs.io/gogs

  GO-2024-3356: Path Traversal in file update API in gogs in gogs.io/gogs

  GO-2025-3776: Gogs allows deletion of internal files which leads to remote command execution in gogs.io/gogs

  GO-2025-3778: Gogs XSS allowed by stored call in PDF renderer in gogs.io/gogs

Jan 5, 2015 GO-2022-0369 +23 more

  GO-2022-0369: Gogs vulnerable to improper PAM authorization handling in gogs.io/gogs

  GO-2022-0377: SSRF in repository migration in gogs.io/gogs

  GO-2022-0471: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0473: Cross site scripting via cookies in gogs in gogs.io/gogs

  GO-2022-0483: Cross-site Scripting vulnerability in repository issue list in Gogs in gogs.io/gogs

  GO-2022-0554: Unrestricted Upload of File with Dangerous Type in Gogs in gogs.io/gogs

  GO-2022-0556: OS Command Injection in file editor in Gogs in gogs.io/gogs

  GO-2022-0562: Path Traversal in Git HTTP endpoints in Gogs in gogs.io/gogs

  GO-2022-0566: SSRF in repository migration in gogs.io/gogs

  GO-2022-0570: Path Traversal in file editor on Windows in Gogs in gogs.io/gogs

  GO-2022-0583: Server-Side Request Forgery in gogs webhook in gogs.io/gogs

  GO-2022-0597: Cross-site Scripting in Gogs in gogs.io/gogs

  GO-2022-0749: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0788: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0797: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0822: Open Redirect in gogs.io/gogs

  GO-2023-1596: Gogs OS Command Injection vulnerability in gogs.io/gogs

  GO-2023-1971: Gogs and Gitea SSRF Vulnerability in code.gitea.io/gitea

  GO-2023-1972: Gogs XSS Vulnerability in gogs.io/gogs

  GO-2024-3275: Unpatched Remote Code Execution in Gogs in gogs.io/gogs

  GO-2024-3355: Remote Command Execution in file editing in gogs in gogs.io/gogs

  GO-2024-3356: Path Traversal in file update API in gogs in gogs.io/gogs

  GO-2025-3776: Gogs allows deletion of internal files which leads to remote command execution in gogs.io/gogs

  GO-2025-3778: Gogs XSS allowed by stored call in PDF renderer in gogs.io/gogs

Dec 14, 2014 GO-2022-0369 +23 more

  GO-2022-0369: Gogs vulnerable to improper PAM authorization handling in gogs.io/gogs

  GO-2022-0377: SSRF in repository migration in gogs.io/gogs

  GO-2022-0471: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0473: Cross site scripting via cookies in gogs in gogs.io/gogs

  GO-2022-0483: Cross-site Scripting vulnerability in repository issue list in Gogs in gogs.io/gogs

  GO-2022-0554: Unrestricted Upload of File with Dangerous Type in Gogs in gogs.io/gogs

  GO-2022-0556: OS Command Injection in file editor in Gogs in gogs.io/gogs

  GO-2022-0562: Path Traversal in Git HTTP endpoints in Gogs in gogs.io/gogs

  GO-2022-0566: SSRF in repository migration in gogs.io/gogs

  GO-2022-0570: Path Traversal in file editor on Windows in Gogs in gogs.io/gogs

  GO-2022-0583: Server-Side Request Forgery in gogs webhook in gogs.io/gogs

  GO-2022-0597: Cross-site Scripting in Gogs in gogs.io/gogs

  GO-2022-0749: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0788: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0797: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0822: Open Redirect in gogs.io/gogs

  GO-2023-1596: Gogs OS Command Injection vulnerability in gogs.io/gogs

  GO-2023-1971: Gogs and Gitea SSRF Vulnerability in code.gitea.io/gitea

  GO-2023-1972: Gogs XSS Vulnerability in gogs.io/gogs

  GO-2024-3275: Unpatched Remote Code Execution in Gogs in gogs.io/gogs

  GO-2024-3355: Remote Command Execution in file editing in gogs in gogs.io/gogs

  GO-2024-3356: Path Traversal in file update API in gogs in gogs.io/gogs

  GO-2025-3776: Gogs allows deletion of internal files which leads to remote command execution in gogs.io/gogs

  GO-2025-3778: Gogs XSS allowed by stored call in PDF renderer in gogs.io/gogs

Nov 19, 2014 GO-2022-0369 +23 more

  GO-2022-0369: Gogs vulnerable to improper PAM authorization handling in gogs.io/gogs

  GO-2022-0377: SSRF in repository migration in gogs.io/gogs

  GO-2022-0471: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0473: Cross site scripting via cookies in gogs in gogs.io/gogs

  GO-2022-0483: Cross-site Scripting vulnerability in repository issue list in Gogs in gogs.io/gogs

  GO-2022-0554: Unrestricted Upload of File with Dangerous Type in Gogs in gogs.io/gogs

  GO-2022-0556: OS Command Injection in file editor in Gogs in gogs.io/gogs

  GO-2022-0562: Path Traversal in Git HTTP endpoints in Gogs in gogs.io/gogs

  GO-2022-0566: SSRF in repository migration in gogs.io/gogs

  GO-2022-0570: Path Traversal in file editor on Windows in Gogs in gogs.io/gogs

  GO-2022-0583: Server-Side Request Forgery in gogs webhook in gogs.io/gogs

  GO-2022-0597: Cross-site Scripting in Gogs in gogs.io/gogs

  GO-2022-0749: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0788: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0797: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0822: Open Redirect in gogs.io/gogs

  GO-2023-1596: Gogs OS Command Injection vulnerability in gogs.io/gogs

  GO-2023-1971: Gogs and Gitea SSRF Vulnerability in code.gitea.io/gitea

  GO-2023-1972: Gogs XSS Vulnerability in gogs.io/gogs

  GO-2024-3275: Unpatched Remote Code Execution in Gogs in gogs.io/gogs

  GO-2024-3355: Remote Command Execution in file editing in gogs in gogs.io/gogs

  GO-2024-3356: Path Traversal in file update API in gogs in gogs.io/gogs

  GO-2025-3776: Gogs allows deletion of internal files which leads to remote command execution in gogs.io/gogs

  GO-2025-3778: Gogs XSS allowed by stored call in PDF renderer in gogs.io/gogs

Oct 10, 2014 GO-2022-0369 +25 more

  GO-2022-0369: Gogs vulnerable to improper PAM authorization handling in gogs.io/gogs

  GO-2022-0377: SSRF in repository migration in gogs.io/gogs

  GO-2022-0471: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0473: Cross site scripting via cookies in gogs in gogs.io/gogs

  GO-2022-0483: Cross-site Scripting vulnerability in repository issue list in Gogs in gogs.io/gogs

  GO-2022-0554: Unrestricted Upload of File with Dangerous Type in Gogs in gogs.io/gogs

  GO-2022-0556: OS Command Injection in file editor in Gogs in gogs.io/gogs

  GO-2022-0562: Path Traversal in Git HTTP endpoints in Gogs in gogs.io/gogs

  GO-2022-0566: SSRF in repository migration in gogs.io/gogs

  GO-2022-0570: Path Traversal in file editor on Windows in Gogs in gogs.io/gogs

  GO-2022-0583: Server-Side Request Forgery in gogs webhook in gogs.io/gogs

  GO-2022-0597: Cross-site Scripting in Gogs in gogs.io/gogs

  GO-2022-0642: Cross-site Scripting in Gogs in gogs.io/gogs

  GO-2022-0749: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0788: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0797: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0822: Open Redirect in gogs.io/gogs

  GO-2022-0831: SQL Injection in Gogs in gogs.io/gogs

  GO-2023-1596: Gogs OS Command Injection vulnerability in gogs.io/gogs

  GO-2023-1971: Gogs and Gitea SSRF Vulnerability in code.gitea.io/gitea

  GO-2023-1972: Gogs XSS Vulnerability in gogs.io/gogs

  GO-2024-3275: Unpatched Remote Code Execution in Gogs in gogs.io/gogs

  GO-2024-3355: Remote Command Execution in file editing in gogs in gogs.io/gogs

  GO-2024-3356: Path Traversal in file update API in gogs in gogs.io/gogs

  GO-2025-3776: Gogs allows deletion of internal files which leads to remote command execution in gogs.io/gogs

  GO-2025-3778: Gogs XSS allowed by stored call in PDF renderer in gogs.io/gogs

Sep 18, 2014 GO-2022-0369 +25 more

  GO-2022-0369: Gogs vulnerable to improper PAM authorization handling in gogs.io/gogs

  GO-2022-0377: SSRF in repository migration in gogs.io/gogs

  GO-2022-0471: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0473: Cross site scripting via cookies in gogs in gogs.io/gogs

  GO-2022-0483: Cross-site Scripting vulnerability in repository issue list in Gogs in gogs.io/gogs

  GO-2022-0554: Unrestricted Upload of File with Dangerous Type in Gogs in gogs.io/gogs

  GO-2022-0556: OS Command Injection in file editor in Gogs in gogs.io/gogs

  GO-2022-0562: Path Traversal in Git HTTP endpoints in Gogs in gogs.io/gogs

  GO-2022-0566: SSRF in repository migration in gogs.io/gogs

  GO-2022-0570: Path Traversal in file editor on Windows in Gogs in gogs.io/gogs

  GO-2022-0583: Server-Side Request Forgery in gogs webhook in gogs.io/gogs

  GO-2022-0597: Cross-site Scripting in Gogs in gogs.io/gogs

  GO-2022-0642: Cross-site Scripting in Gogs in gogs.io/gogs

  GO-2022-0749: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0788: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0797: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0822: Open Redirect in gogs.io/gogs

  GO-2022-0831: SQL Injection in Gogs in gogs.io/gogs

  GO-2023-1596: Gogs OS Command Injection vulnerability in gogs.io/gogs

  GO-2023-1971: Gogs and Gitea SSRF Vulnerability in code.gitea.io/gitea

  GO-2023-1972: Gogs XSS Vulnerability in gogs.io/gogs

  GO-2024-3275: Unpatched Remote Code Execution in Gogs in gogs.io/gogs

  GO-2024-3355: Remote Command Execution in file editing in gogs in gogs.io/gogs

  GO-2024-3356: Path Traversal in file update API in gogs in gogs.io/gogs

  GO-2025-3776: Gogs allows deletion of internal files which leads to remote command execution in gogs.io/gogs

  GO-2025-3778: Gogs XSS allowed by stored call in PDF renderer in gogs.io/gogs

Sep 14, 2014 GO-2022-0369 +25 more

  GO-2022-0369: Gogs vulnerable to improper PAM authorization handling in gogs.io/gogs

  GO-2022-0377: SSRF in repository migration in gogs.io/gogs

  GO-2022-0471: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0473: Cross site scripting via cookies in gogs in gogs.io/gogs

  GO-2022-0483: Cross-site Scripting vulnerability in repository issue list in Gogs in gogs.io/gogs

  GO-2022-0554: Unrestricted Upload of File with Dangerous Type in Gogs in gogs.io/gogs

  GO-2022-0556: OS Command Injection in file editor in Gogs in gogs.io/gogs

  GO-2022-0562: Path Traversal in Git HTTP endpoints in Gogs in gogs.io/gogs

  GO-2022-0566: SSRF in repository migration in gogs.io/gogs

  GO-2022-0570: Path Traversal in file editor on Windows in Gogs in gogs.io/gogs

  GO-2022-0583: Server-Side Request Forgery in gogs webhook in gogs.io/gogs

  GO-2022-0597: Cross-site Scripting in Gogs in gogs.io/gogs

  GO-2022-0642: Cross-site Scripting in Gogs in gogs.io/gogs

  GO-2022-0749: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0788: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0797: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0822: Open Redirect in gogs.io/gogs

  GO-2022-0831: SQL Injection in Gogs in gogs.io/gogs

  GO-2023-1596: Gogs OS Command Injection vulnerability in gogs.io/gogs

  GO-2023-1971: Gogs and Gitea SSRF Vulnerability in code.gitea.io/gitea

  GO-2023-1972: Gogs XSS Vulnerability in gogs.io/gogs

  GO-2024-3275: Unpatched Remote Code Execution in Gogs in gogs.io/gogs

  GO-2024-3355: Remote Command Execution in file editing in gogs in gogs.io/gogs

  GO-2024-3356: Path Traversal in file update API in gogs in gogs.io/gogs

  GO-2025-3776: Gogs allows deletion of internal files which leads to remote command execution in gogs.io/gogs

  GO-2025-3778: Gogs XSS allowed by stored call in PDF renderer in gogs.io/gogs

Jun 6, 2014 GO-2022-0369 +25 more

  GO-2022-0369: Gogs vulnerable to improper PAM authorization handling in gogs.io/gogs

  GO-2022-0377: SSRF in repository migration in gogs.io/gogs

  GO-2022-0471: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0473: Cross site scripting via cookies in gogs in gogs.io/gogs

  GO-2022-0483: Cross-site Scripting vulnerability in repository issue list in Gogs in gogs.io/gogs

  GO-2022-0554: Unrestricted Upload of File with Dangerous Type in Gogs in gogs.io/gogs

  GO-2022-0556: OS Command Injection in file editor in Gogs in gogs.io/gogs

  GO-2022-0562: Path Traversal in Git HTTP endpoints in Gogs in gogs.io/gogs

  GO-2022-0566: SSRF in repository migration in gogs.io/gogs

  GO-2022-0570: Path Traversal in file editor on Windows in Gogs in gogs.io/gogs

  GO-2022-0583: Server-Side Request Forgery in gogs webhook in gogs.io/gogs

  GO-2022-0597: Cross-site Scripting in Gogs in gogs.io/gogs

  GO-2022-0642: Cross-site Scripting in Gogs in gogs.io/gogs

  GO-2022-0749: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0788: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0797: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0822: Open Redirect in gogs.io/gogs

  GO-2022-0831: SQL Injection in Gogs in gogs.io/gogs

  GO-2023-1596: Gogs OS Command Injection vulnerability in gogs.io/gogs

  GO-2023-1971: Gogs and Gitea SSRF Vulnerability in code.gitea.io/gitea

  GO-2023-1972: Gogs XSS Vulnerability in gogs.io/gogs

  GO-2024-3275: Unpatched Remote Code Execution in Gogs in gogs.io/gogs

  GO-2024-3355: Remote Command Execution in file editing in gogs in gogs.io/gogs

  GO-2024-3356: Path Traversal in file update API in gogs in gogs.io/gogs

  GO-2025-3776: Gogs allows deletion of internal files which leads to remote command execution in gogs.io/gogs

  GO-2025-3778: Gogs XSS allowed by stored call in PDF renderer in gogs.io/gogs

Jun 1, 2014 GO-2022-0369 +25 more

  GO-2022-0369: Gogs vulnerable to improper PAM authorization handling in gogs.io/gogs

  GO-2022-0377: SSRF in repository migration in gogs.io/gogs

  GO-2022-0471: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0473: Cross site scripting via cookies in gogs in gogs.io/gogs

  GO-2022-0483: Cross-site Scripting vulnerability in repository issue list in Gogs in gogs.io/gogs

  GO-2022-0554: Unrestricted Upload of File with Dangerous Type in Gogs in gogs.io/gogs

  GO-2022-0556: OS Command Injection in file editor in Gogs in gogs.io/gogs

  GO-2022-0562: Path Traversal in Git HTTP endpoints in Gogs in gogs.io/gogs

  GO-2022-0566: SSRF in repository migration in gogs.io/gogs

  GO-2022-0570: Path Traversal in file editor on Windows in Gogs in gogs.io/gogs

  GO-2022-0583: Server-Side Request Forgery in gogs webhook in gogs.io/gogs

  GO-2022-0597: Cross-site Scripting in Gogs in gogs.io/gogs

  GO-2022-0642: Cross-site Scripting in Gogs in gogs.io/gogs

  GO-2022-0749: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0788: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0797: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0822: Open Redirect in gogs.io/gogs

  GO-2022-0831: SQL Injection in Gogs in gogs.io/gogs

  GO-2023-1596: Gogs OS Command Injection vulnerability in gogs.io/gogs

  GO-2023-1971: Gogs and Gitea SSRF Vulnerability in code.gitea.io/gitea

  GO-2023-1972: Gogs XSS Vulnerability in gogs.io/gogs

  GO-2024-3275: Unpatched Remote Code Execution in Gogs in gogs.io/gogs

  GO-2024-3355: Remote Command Execution in file editing in gogs in gogs.io/gogs

  GO-2024-3356: Path Traversal in file update API in gogs in gogs.io/gogs

  GO-2025-3776: Gogs allows deletion of internal files which leads to remote command execution in gogs.io/gogs

  GO-2025-3778: Gogs XSS allowed by stored call in PDF renderer in gogs.io/gogs

May 31, 2014 GO-2022-0369 +25 more

  GO-2022-0369: Gogs vulnerable to improper PAM authorization handling in gogs.io/gogs

  GO-2022-0377: SSRF in repository migration in gogs.io/gogs

  GO-2022-0471: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0473: Cross site scripting via cookies in gogs in gogs.io/gogs

  GO-2022-0483: Cross-site Scripting vulnerability in repository issue list in Gogs in gogs.io/gogs

  GO-2022-0554: Unrestricted Upload of File with Dangerous Type in Gogs in gogs.io/gogs

  GO-2022-0556: OS Command Injection in file editor in Gogs in gogs.io/gogs

  GO-2022-0562: Path Traversal in Git HTTP endpoints in Gogs in gogs.io/gogs

  GO-2022-0566: SSRF in repository migration in gogs.io/gogs

  GO-2022-0570: Path Traversal in file editor on Windows in Gogs in gogs.io/gogs

  GO-2022-0583: Server-Side Request Forgery in gogs webhook in gogs.io/gogs

  GO-2022-0597: Cross-site Scripting in Gogs in gogs.io/gogs

  GO-2022-0642: Cross-site Scripting in Gogs in gogs.io/gogs

  GO-2022-0749: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0788: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0797: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0822: Open Redirect in gogs.io/gogs

  GO-2022-0831: SQL Injection in Gogs in gogs.io/gogs

  GO-2023-1596: Gogs OS Command Injection vulnerability in gogs.io/gogs

  GO-2023-1971: Gogs and Gitea SSRF Vulnerability in code.gitea.io/gitea

  GO-2023-1972: Gogs XSS Vulnerability in gogs.io/gogs

  GO-2024-3275: Unpatched Remote Code Execution in Gogs in gogs.io/gogs

  GO-2024-3355: Remote Command Execution in file editing in gogs in gogs.io/gogs

  GO-2024-3356: Path Traversal in file update API in gogs in gogs.io/gogs

  GO-2025-3776: Gogs allows deletion of internal files which leads to remote command execution in gogs.io/gogs

  GO-2025-3778: Gogs XSS allowed by stored call in PDF renderer in gogs.io/gogs

Apr 29, 2014 GO-2022-0369 +25 more

  GO-2022-0369: Gogs vulnerable to improper PAM authorization handling in gogs.io/gogs

  GO-2022-0377: SSRF in repository migration in gogs.io/gogs

  GO-2022-0471: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0473: Cross site scripting via cookies in gogs in gogs.io/gogs

  GO-2022-0483: Cross-site Scripting vulnerability in repository issue list in Gogs in gogs.io/gogs

  GO-2022-0554: Unrestricted Upload of File with Dangerous Type in Gogs in gogs.io/gogs

  GO-2022-0556: OS Command Injection in file editor in Gogs in gogs.io/gogs

  GO-2022-0562: Path Traversal in Git HTTP endpoints in Gogs in gogs.io/gogs

  GO-2022-0566: SSRF in repository migration in gogs.io/gogs

  GO-2022-0570: Path Traversal in file editor on Windows in Gogs in gogs.io/gogs

  GO-2022-0583: Server-Side Request Forgery in gogs webhook in gogs.io/gogs

  GO-2022-0597: Cross-site Scripting in Gogs in gogs.io/gogs

  GO-2022-0642: Cross-site Scripting in Gogs in gogs.io/gogs

  GO-2022-0749: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0788: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0797: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0822: Open Redirect in gogs.io/gogs

  GO-2022-0831: SQL Injection in Gogs in gogs.io/gogs

  GO-2023-1596: Gogs OS Command Injection vulnerability in gogs.io/gogs

  GO-2023-1971: Gogs and Gitea SSRF Vulnerability in code.gitea.io/gitea

  GO-2023-1972: Gogs XSS Vulnerability in gogs.io/gogs

  GO-2024-3275: Unpatched Remote Code Execution in Gogs in gogs.io/gogs

  GO-2024-3355: Remote Command Execution in file editing in gogs in gogs.io/gogs

  GO-2024-3356: Path Traversal in file update API in gogs in gogs.io/gogs

  GO-2025-3776: Gogs allows deletion of internal files which leads to remote command execution in gogs.io/gogs

  GO-2025-3778: Gogs XSS allowed by stored call in PDF renderer in gogs.io/gogs

Apr 21, 2014 GO-2022-0369 +23 more

  GO-2022-0369: Gogs vulnerable to improper PAM authorization handling in gogs.io/gogs

  GO-2022-0377: SSRF in repository migration in gogs.io/gogs

  GO-2022-0471: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0473: Cross site scripting via cookies in gogs in gogs.io/gogs

  GO-2022-0483: Cross-site Scripting vulnerability in repository issue list in Gogs in gogs.io/gogs

  GO-2022-0554: Unrestricted Upload of File with Dangerous Type in Gogs in gogs.io/gogs

  GO-2022-0556: OS Command Injection in file editor in Gogs in gogs.io/gogs

  GO-2022-0562: Path Traversal in Git HTTP endpoints in Gogs in gogs.io/gogs

  GO-2022-0566: SSRF in repository migration in gogs.io/gogs

  GO-2022-0570: Path Traversal in file editor on Windows in Gogs in gogs.io/gogs

  GO-2022-0583: Server-Side Request Forgery in gogs webhook in gogs.io/gogs

  GO-2022-0597: Cross-site Scripting in Gogs in gogs.io/gogs

  GO-2022-0749: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0788: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0797: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0822: Open Redirect in gogs.io/gogs

  GO-2023-1596: Gogs OS Command Injection vulnerability in gogs.io/gogs

  GO-2023-1971: Gogs and Gitea SSRF Vulnerability in code.gitea.io/gitea

  GO-2023-1972: Gogs XSS Vulnerability in gogs.io/gogs

  GO-2024-3275: Unpatched Remote Code Execution in Gogs in gogs.io/gogs

  GO-2024-3355: Remote Command Execution in file editing in gogs in gogs.io/gogs

  GO-2024-3356: Path Traversal in file update API in gogs in gogs.io/gogs

  GO-2025-3776: Gogs allows deletion of internal files which leads to remote command execution in gogs.io/gogs

  GO-2025-3778: Gogs XSS allowed by stored call in PDF renderer in gogs.io/gogs

Mar 31, 2014 GO-2022-0369 +23 more

  GO-2022-0369: Gogs vulnerable to improper PAM authorization handling in gogs.io/gogs

  GO-2022-0377: SSRF in repository migration in gogs.io/gogs

  GO-2022-0471: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0473: Cross site scripting via cookies in gogs in gogs.io/gogs

  GO-2022-0483: Cross-site Scripting vulnerability in repository issue list in Gogs in gogs.io/gogs

  GO-2022-0554: Unrestricted Upload of File with Dangerous Type in Gogs in gogs.io/gogs

  GO-2022-0556: OS Command Injection in file editor in Gogs in gogs.io/gogs

  GO-2022-0562: Path Traversal in Git HTTP endpoints in Gogs in gogs.io/gogs

  GO-2022-0566: SSRF in repository migration in gogs.io/gogs

  GO-2022-0570: Path Traversal in file editor on Windows in Gogs in gogs.io/gogs

  GO-2022-0583: Server-Side Request Forgery in gogs webhook in gogs.io/gogs

  GO-2022-0597: Cross-site Scripting in Gogs in gogs.io/gogs

  GO-2022-0749: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0788: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0797: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0822: Open Redirect in gogs.io/gogs

  GO-2023-1596: Gogs OS Command Injection vulnerability in gogs.io/gogs

  GO-2023-1971: Gogs and Gitea SSRF Vulnerability in code.gitea.io/gitea

  GO-2023-1972: Gogs XSS Vulnerability in gogs.io/gogs

  GO-2024-3275: Unpatched Remote Code Execution in Gogs in gogs.io/gogs

  GO-2024-3355: Remote Command Execution in file editing in gogs in gogs.io/gogs

  GO-2024-3356: Path Traversal in file update API in gogs in gogs.io/gogs

  GO-2025-3776: Gogs allows deletion of internal files which leads to remote command execution in gogs.io/gogs

  GO-2025-3778: Gogs XSS allowed by stored call in PDF renderer in gogs.io/gogs