GO-2026-4627 Gogs: DOM-based XSS via milestone selection in gogs.io/gogs

Gogs: DOM-based XSS via milestone selection in gogs.io/gogs...

Authentication Bypass Using an Alternate Path or Channel

Overview Affected versions of this package are vulnerable to Authentication Bypass Using an Alternate Path or Channel in the UseRecoveryCode function, which fails to check the supplied userID before validating the second factor. A user in possession of the username and password of another user ca...

GO-2025-4225 Gogs vulnerable to a bypass of CVE-2024-55947 in gogs.io/gogs

Gogs vulnerable to a bypass of CVE-2024-55947 in gogs.io/gogs...