SUSE CVE-2026-52810

Gogs is an open source self-hosted Git service. Prior to 0.14.3, Git smart HTTP authorizes POST .../git-receive-pack using the client-supplied service query string so ?service=git-upload-pack is evaluated as read access while routing still runs git receive-pack, allowing push where only read shou...

SUSE CVE-2026-52811

Gogs is an open source self-hosted Git service. Prior to 0.14.3, Repository.UploadRepoFiles checks for symlinks only on the leaf of the upload target osx.IsSymlinktargetPath. The siblings UpdateRepoFile, DeleteRepoFile, and GetDiffPreview use hasSymlinkInPath, which lstats every component -...

SUSE CVE-2026-52812

Gogs is an open source self-hosted Git service. Prior to 0.14.3, Git LFS storage is content-addressed by OID alone /// but per-repo authorization lives in the lfsobject table keyed repoid, oid. serveUpload skips re-uploading when the OID file already exists on disk and inserts a new repoid, oid r...

SUSE CVE-2026-52813

Gogs is an open source self-hosted Git service. Prior to 0.14.3, organization names containing path traversal sequences ../ are accepted by Gogs, and repositories under them are written to paths following these path traversals. This allows storing/retrieving data for repositories at arbitrary...

SUSE CVE-2026-52814

Gogs is an open source self-hosted Git service. Prior to 0.14.3, the Gogs built-in Go SSH server is vulnerable to an unauthenticated, asymmetric Denial of Service DoS attack. The application accepts inbound TCP connections and passes them to golang.org/x/crypto/ssh.NewServerConn inside a new...

SUSE CVE-2026-52815

Gogs is an open source self-hosted Git service. Prior to 0.14.3, Gogs has an unauthenticated information disclosure vulnerability. The GET /api/v1/orgs/:orgname/teams endpoint at internal/route/api/v1/orgteam.go:8 returns all teams for any organization without requiring authentication. The route...

SUSE CVE-2026-52816

Gogs is an open source self-hosted Git service. Prior to 0.14.3, the Jupyter Notebook ipynb sanitizer endpoint at POST /-/api/sanitizeipynb allows arbitrary data: URIs without proper restrictions, potentially leading to Cross-Site Scripting XSS. The endpoint uses bluemonday.UGCPolicy with...

Gogs <= 0.13.3 - Remote Code Execution

Gogs self-hosted Git service versions 0.13.3 and earlier contain a critical symlink bypass vulnerability that circumvents the fix for CVE-2024-55947. Authenticated users can exploit improper symbolic link handling in the PutContents API to overwrite files outside the repository by committing a...

Exploit for Path Traversal in Gogs

CVE-2025-8110 — Gogs RCE PoC Silentium / HackTheBox Dis...

Exploit for CVE-2026-52813

CVE-2026-52813 – Gogs path traversal leading to remote code ex...

Exploit for Path Traversal in Gogs

CVE-2025-8110 — Gogs Arbitrary File Write PoC Proof-of-conc...

Exploit for Path Traversal in Gogs

Gogs Arbitrary File Write to RCE CVE-2025-8110 - Exploit de...

Exploit for Path Traversal in Gogs

─── Ghostlink ─── 🏴 AMN SECURITY 🏴 مركز أبحاث...

The vulnerability of the Merge() function in the Gogs automated Git repository creation tool allows a hacker to execute arbitrary code.

The vulnerability of the Merge function in the Gogs automated Git repository creation tool is related to the lack of measures taken at the control level to clean up data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

VulnCheck KEV: CVE-2026-52806

Gogs is an open source self-hosted Git service. Prior to 0.14.3, Gogs allows authenticated users to achieve Remote Code Execution RCE on the server by creating a pull request with a specially crafted branch name that injects the --exec flag into the git rebase command during the "Rebase before...

Improper Link Resolution Before File Access

gogs.io/gogs is vulnerable to Improper Link Resolution Before File Access. The vulnerability is due to improper validation of symbolic links in the UploadRepoFiles function, which only checks the final upload target instead of every path component, allowing an attacker with repository write acces...

Path Traversal

gogs.io/gogs is vulnerable to Path Traversal. The vulnerability is due to Gogs accepting organization names containing path traversal sequences ../ and writing repositories to filesystem paths outside the intended directory, which allows an attacker to store repositories in arbitrary locations an...

VulnCheck KEV: CVE-2026-52813

Gogs is an open source self-hosted Git service. Prior to 0.14.3, organization names containing path traversal sequences ../ are accepted by Gogs, and repositories under them are written to paths following these path traversals. This allows storing/retrieving data for repositories at arbitrary...

The vulnerability of the internal/database/org.go function in the software for creating self-managed Git repositories, Gogs, allows a hacker to execute arbitrary code.

The vulnerability of the internal/database/org.go function in the software for creating self-managed Git repositories called Gogs is related to errors in the mechanism for handling relative pathnames to directories. Exploiting this vulnerability could allow a malicious actor to execute arbitrary...

GO-2026-5773 Gogs has an Open Redirect via redirect_to in gogs.io/gogs

Gogs has an Open Redirect via redirectto in gogs.io/gogs. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. If this is causing false-positive reports from vulnerability scanners, please suggest an edit to...