EUVD-2021-0961

Malware in sbrugna...

CVE-2024-39932

Gogs through 0.13.0 allows argument injection during the previewing of changes...

Insecure Permissions in Gogs

In Gogs 0.11.91, MakeEmailPrimary in models/usermail.go lacks a "not the owner of the email" check...

Race condition

Gogs through 0.11.91 allows attackers to violate the admin-specified repo-creation policy due to an internal/db/repo.go race condition...