CVE-2026-52812

Gogs is an open source self-hosted Git service. Prior to 0.14.3, Git LFS storage is content-addressed by OID alone /// but per-repo authorization lives in the lfsobject table keyed repoid, oid. serveUpload skips re-uploading when the OID file already exists on disk and inserts a new repoid, oid r...

CVE-2026-52812

creationtimestamp| type| source ---|---|--- 2026-06-19 02:17:49+00:00| published-proof-of-concept| https://github.com/gogs/gogs/security/advisories/GHSA-6p9m-q3jp-47h4 2026-06-24 22:38:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp2y72dynn2f...