19 matches found
GO-2026-4616 Gogs: Cross-repository LFS object overwrite via missing content hash verification in gogs.io/gogs
Gogs: Cross-repository LFS object overwrite via missing content hash verification in gogs.io/gogs. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. If this is causing false-positive reports from...
CVE-2022-0870
Server-Side Request Forgery SSRF in GitHub repository gogs/gogs prior to 0.12.5...
CVE-2022-0871
Missing Authorization in GitHub repository gogs/gogs prior to 0.12.5...
EUVD-2020-30150
Malware in sbrugna...
EUVD-2022-6172
Malicious code in bioql PyPI...
EUVD-2022-6005
Malicious code in bioql PyPI...
CVE-2022-1992
Path Traversal in GitHub repository gogs/gogs prior to 0.12.9...
CVE-2022-0415
Remote Command Execution in uploading repository file in GitHub repository gogs/gogs prior to 0.12.6...
Gogs Data Access
The vulnerability of the Gogs Git repository creation software interface is related to errors in handling symbolic links. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain access to read, modify, or delete data...
CVE-2022-2024 OS Command Injection in gogs/gogs
OS Command Injection in GitHub repository gogs/gogs prior to 0.12.11...
CVE-2022-1993
Path Traversal in GitHub repository gogs/gogs prior to 0.12.9...
CVE-2022-1986
OS Command Injection in GitHub repository gogs/gogs prior to 0.12.9...
CVE-2022-1285
Server-Side Request Forgery SSRF in GitHub repository gogs/gogs prior to 0.12.8...
Server side request forgery (ssrf)
Server-Side Request Forgery SSRF in GitHub repository gogs/gogs prior to 0.12.8...
CVE-2022-0415
Remote Command Execution in uploading repository file in GitHub repository gogs/gogs prior to 0.12.6...
UBUNTU-CVE-2022-0415
Remote Command Execution in uploading repository file in GitHub repository gogs/gogs prior to 0.12.6...
CVE-2022-0415 Remote Command Execution in uploading repository file in gogs/gogs
Remote Command Execution in uploading repository file in GitHub repository gogs/gogs prior to 0.12.6...
CVE-2022-0870
Server-Side Request Forgery SSRF in GitHub repository gogs/gogs prior to 0.12.5...
Gogs Repository Search SQL Injection
-----BEGIN PGP SIGNED MESSAGE----- Hash: RIPEMD160 Unauthenticated SQL Injection in Gogs repository search ======================================================= Researcher: Timo Schmid Description =========== GogsGo Git Service is a painless self-hosted Git Service written in Go. taken from 1 I...