PT-2023-9825

🗓️ 27 Oct 2023 00:00:00Reported by Positive TechnologiesType

ptsecurity🔗 dbugs.ptsecurity.com👁 6 Views

Gogs before 0.13.1 allows remote file writes to arbitrary server paths, risking SSH access; upgrade.

Reporter	Title	Published	Views	Family All 1529
OSV	CGA-XW2H-VXP4-VFVG	8 Jan 202508:08	–	osv
OSV	CGA-XWJV-J2M3-P4CV	3 Jan 202520:08	–	osv
OSV	CGA-XX69-98PG-JXM9	20 Dec 202423:08	–	osv
OSV	CLEANSTART-2026-CX82241 Security fixes in runc 1.1.14-r0	30 Jul 202607:10	–	osv
OSV	CLEANSTART-2026-EJ93145 attacker may cause an HTTP/2 endpoint to read arbitrary amounts of header data by sending an excessive number of CONTINUATION frames	7 Apr 202600:44	–	osv
OSV	CLEANSTART-2026-HZ73294 Validating certificate chains which use policies is unexpectedly inefficient when certificates in the chain contain a very large number of policy mappings, possibly causing denial of service	9 Apr 202600:45	–	osv
OSV	CLEANSTART-2026-MW42038 Security fixes for CVE-2019-16884, CVE-2019-19921, CVE-2019-5736, CVE-2021-30465, CVE-2021-43784, CVE-2022-29162, CVE-2023-25809, CVE-2023-27561, CVE-2023-28642, CVE-2024-21626, CVE-2024-45310, CVE-2024-45338, CVE-2025-0913, CVE-2025-22870, CVE-2025-22871, CVE-2025-22872, CVE-2025-22873, CVE-2025-4673, CVE-2025-4674, CVE-2025-47906, CVE-2025-47907, CVE-2025-47911, CVE-2025-47912, CVE-2025-52881, CVE-2025-58183, CVE-2025-58185, CVE-2025-58186, CVE-2025-58187, CVE-2025-58188, CVE-2025-58189, CVE-2025-58190, CVE-2025-61723, CVE-2025-61724, CVE-2025-61725, CVE-2025-61726, CVE-2025-61727, CVE-2025-61728, CVE-2025-61729, CVE-2025-61730, CVE-2025-61731, CVE-2025-61732, CVE-2025-65637, CVE-2025-68121, CVE-2026-25679, CVE-2026-25680, CVE-2026-25681, CVE-2026-27136, CVE-2026-27139, CVE-2026-27142, CVE-2026-27145, CVE-2026-33811, CVE-2026-33814, CVE-2026-39820, CVE-2026-39821, CVE-2026-39823, CVE-2026-39825, CVE-2026-39826, CVE-2026-39836, CVE-2026-42499, CVE-2026-42502, CVE-2026-42504, CVE-2026-42506, CVE-2026-42507, ghsa-4f99-4q7p-p3gh, ghsa-cgrx-mc8f-2prm, ghsa-qxp5-gwg8-xv66, ghsa-vvgc-356p-c3xw applied in versions: 1.0.0_rc10-r0, 1.0.0_rc7-r0, 1.0.0_rc9-r0, 1.0.0_rc95-r0, 1.0.3-r0, 1.1.12-r0, 1.1.14-r0, 1.1.2-r0, 1.1.4-r0, 1.1.4-r7, 1.4.2-r0, 1.4.2-r1	21 Jul 202611:18	–	osv
OSV	CLEANSTART-2026-NG63443 Security fixes in cfssl 1.5.0-r1	13 Aug 202612:10	–	osv
OSV	CLEANSTART-2026-RF96040 Security fixes for CVE-2023-45288, CVE-2023-48795, CVE-2024-24786, CVE-2024-45337, CVE-2024-45338, CVE-2025-22868, CVE-2025-22869, CVE-2025-22870, CVE-2025-22872, CVE-2025-47911, CVE-2025-47913, CVE-2025-47914, CVE-2025-58181, CVE-2025-58190, CVE-2026-25680, CVE-2026-25681, CVE-2026-27136, CVE-2026-27140, CVE-2026-27143, CVE-2026-27144, CVE-2026-32280, CVE-2026-32281, CVE-2026-32282, CVE-2026-32283, CVE-2026-32288, CVE-2026-32289, CVE-2026-33810, CVE-2026-33811, CVE-2026-33814, CVE-2026-39817, CVE-2026-39819, CVE-2026-39820, CVE-2026-39821, CVE-2026-39823, CVE-2026-39824, CVE-2026-39825, CVE-2026-39826, CVE-2026-39827, CVE-2026-39828, CVE-2026-39829, CVE-2026-39830, CVE-2026-39831, CVE-2026-39832, CVE-2026-39833, CVE-2026-39834, CVE-2026-39835, CVE-2026-39836, CVE-2026-42499, CVE-2026-42501, CVE-2026-42502, CVE-2026-42506, CVE-2026-42508, CVE-2026-46595, CVE-2026-46597, CVE-2026-46598 applied in versions: 2.10.1-r0, 2.10.1-r1, 2.10.1-r2	13 Jul 202608:02	–	osv
OSV	CLEANSTART-2026-SQ68600 Security fixes for CVE-2023-45288, CVE-2024-24786, CVE-2024-45338, CVE-2025-22868, CVE-2025-22869, CVE-2025-22872, CVE-2025-47911, CVE-2025-47913, CVE-2025-47914, CVE-2025-58181, CVE-2025-58190, CVE-2025-65637, ghsa-4f99-4q7p-p3gh, ghsa-4v7x-pqxf-cx7m, ghsa-6v2p-p543-phr9, ghsa-8r3f-844c-mc37, ghsa-f6x5-jh6r-wrfv, ghsa-hcg3-q754-cr77, ghsa-j5w8-q4qc-rx2x, ghsa-qxp5-gwg8-xv66, ghsa-v778-237x-gjrc, ghsa-vvgc-356p-c3xw applied in versions: 1.18.2-r0	6 Apr 202602:50	–	osv

Source	Link
twitter	www.twitter.com/N3mes1s/status/1999128861464809618
suse	www.suse.com/security/cve/CVE-2024-45387
github	www.github.com/CVEProject/cvelistV5/tree/main/cves/2024/55xxx/CVE-2024-55947.json
twitter	www.twitter.com/_cvereports/status/2011685686424772775
suse	www.suse.com/support/update/announcement/2025/suse-su-20250060-1
github	www.github.com/gogs/gogs/security/advisories/GHSA-qf5v-rp47-55gg
t	www.t.me/latest_high_impact_cve/1691
twitter	www.twitter.com/ox0ffff/status/2010822257526906912
github	www.github.com/gogs/gogs/commit/9a9388ace25bd646f5098cb9193d983332c34e41
reddit	www.reddit.com/r/u_all-in-one-wisper/comments/1pktqhq/daily_wisper_report_the_week_in_review_dec_12

15 Jan 2026 00:00Current

8.2High risk

Vulners AI Score8.2

CVSS 3.18.8 - 9.9

CVSS 49.2

EPSS0.75197

SSVC