1316 matches found
GHSA-P9F5-H3RX-J5QW Gogs Missing Authorization in Attachment Download
Summary In Gogs 0.14.1, GET /attachments/:uuid returns the raw attachment file without verifying whether the requester has view permission for the associated Issue/Comment/Release or the repository. In a test environment with REQUIRESIGNINVIEW = false, we confirmed that an unauthenticated user ca...
Gogs has Stored XSS in `.ipynb` Preview
Summary Although .ipynb previews are sanitized on the server side via /-/api/sanitizeipynb, the inserted content is re-rendered on the client side without sanitization using marked on elements with the .nb-markdown-cell class. During this process, links containing schemes such as javascript: can ...
GHSA-JQ8V-RMF6-65JW Gogs has Stored XSS in `.ipynb` Preview
Summary Although .ipynb previews are sanitized on the server side via /-/api/sanitizeipynb, the inserted content is re-rendered on the client side without sanitization using marked on elements with the .nb-markdown-cell class. During this process, links containing schemes such as javascript: can ...
Gogs has DoS in rendering issue index pattern
Summary Special template of issue index pattern may cause panic. Details in internal/markup/markup.go go link = fmt.Sprintf%s, com.Expandmetas"format", metas, m Issue index pattern is rendered to link with com.Expand. However, com.Expand is not safe. go i = strings.Indextemplate, "" if s, ok :=...
GHSA-4J89-2C4F-44C6 Gogs has DoS in rendering issue index pattern
Summary Special template of issue index pattern may cause panic. Details in internal/markup/markup.go go link = fmt.Sprintf%s, com.Expandmetas"format", metas, m Issue index pattern is rendered to link with com.Expand. However, com.Expand is not safe. go i = strings.Indextemplate, "" if s, ok :=...
Gogs has SSRF in webhook deliveries
Summary The fix for CVE-2022-1285 prevents adding webooks or running webhooks with URLs with a hostname that resolves in localCIDRs. However, webhooks still follow redirects allowing to access hostname inside localCIDRs. This was already communicated in the initial report but it looks like there...
GHSA-C4V7-XG93-QF8G Gogs has SSRF in webhook deliveries
Summary The fix for CVE-2022-1285 prevents adding webooks or running webhooks with URLs with a hostname that resolves in localCIDRs. However, webhooks still follow redirects allowing to access hostname inside localCIDRs. This was already communicated in the initial report but it looks like there...
Gogs has an Authentication Bypass via Unvalidated Reverse Proxy Headers
Summary When ENABLEREVERSEPROXYAUTHENTICATION is enabled, Gogs accepts the configured authentication header default: X-WEBAUTH-USER directly from client requests without validating that the request originated from a trusted reverse proxy. Any remote attacker who can reach the Gogs service can for...
GHSA-W6J9-VW59-27WV Gogs has an Authentication Bypass via Unvalidated Reverse Proxy Headers
Summary When ENABLEREVERSEPROXYAUTHENTICATION is enabled, Gogs accepts the configured authentication header default: X-WEBAUTH-USER directly from client requests without validating that the request originated from a trusted reverse proxy. Any remote attacker who can reach the Gogs service can for...
GHSA-3QQ3-668M-V9MJ Gogs has a Denial of Service in repository/wiki file listing web pages
Summary A malicious user with rights to create a new file on a repository or wiki page can trigger a denial of service condition in which the pages containing the listing of files will return HTTP error 500 and render the web interface unusable for the repository or wiki. Details The issue is...
PT-2026-51130
Name of the Vulnerable Software and Affected Versions Gogs affected versions not specified Description A stored cross-site scripting issue exists due to the use of an outdated notebookjs library. While .ipynb previews are sanitized on the server side via the '/-/api/sanitize ipynb' endpoint,...
Gogs: XSS in .ipynb files renderer due to outdated notebookjs
Summary Gogs renders Jupyter notebook files .ipynb using jsvine/notebookjs, but the version is outdated, missing patches for known XSS vulnerabilities. Details Gogs uses version 0.4.2 of notebookjs to render Jupyter notebook files:...
GHSA-6VXV-WG6J-5QWP Gogs: XSS in .ipynb files renderer due to outdated notebookjs
Summary Gogs renders Jupyter notebook files .ipynb using jsvine/notebookjs, but the version is outdated, missing patches for known XSS vulnerabilities. Details Gogs uses version 0.4.2 of notebookjs to render Jupyter notebook files:...
CVE-2025-64719
creationtimestamp| type| source ---|---|--- 2026-06-19 02:23:08+00:00| published-proof-of-concept| https://github.com/gogs/gogs/security/advisories/GHSA-3qq3-668m-v9mj...
CVE-2026-25119
creationtimestamp| type| source ---|---|--- 2026-06-19 02:22:56+00:00| published-proof-of-concept| https://github.com/gogs/gogs/security/advisories/GHSA-w6j9-vw59-27wv...
CVE-2026-47267
creationtimestamp| type| source ---|---|--- 2026-06-19 02:22:31+00:00| published-proof-of-concept| https://github.com/gogs/gogs/security/advisories/GHSA-c4v7-xg93-qf8g...
CVE-2026-52796
creationtimestamp| type| source ---|---|--- 2026-06-19 02:22:15+00:00| published-proof-of-concept| https://github.com/gogs/gogs/security/advisories/GHSA-4j89-2c4f-44c6...
CVE-2026-52798
creationtimestamp| type| source ---|---|--- 2026-06-19 02:22:07+00:00| published-proof-of-concept| https://github.com/gogs/gogs/security/advisories/GHSA-jq8v-rmf6-65jw...
CVE-2026-52801
creationtimestamp| type| source ---|---|--- 2026-06-19 02:21:31+00:00| published-proof-of-concept| https://github.com/gogs/gogs/security/advisories/GHSA-wv27-2vqp-j7g5 2026-06-23 03:09:57+00:00| seen| https://bsky.app/profile/suriq.io/post/3mowgfyzzvh2y...