119 matches found
CVE-2024-39932
Gogs through 0.13.0 allows argument injection during the previewing of changes...
Gogs 安全漏洞
Gogs Go Git Service is a self-service Git hosting service based on the Go language by the Gogs team, which supports creating and migrating public/private repositories, adding and removing repository collaborators, and so on. A security vulnerability exists in Gogs, which stems from the mishandlin...
EUVD-2021-1303
Malware in sbrugna...
EUVD-2018-8249
Malware in sbrugna...
EUVD-2022-5932
Malicious code in bioql PyPI...
EUVD-2022-3398
Malicious code in bioql PyPI...
EUVD-2022-4849
Malicious code in bioql PyPI...
EUVD-2024-3610
Malicious code in bioql PyPI...
EUVD-2024-3599
Malicious code in bioql PyPI...
EUVD-2024-3572
Malicious code in bioql PyPI...
GO-2025-3776 Gogs allows deletion of internal files which leads to remote command execution in gogs.io/gogs
Gogs allows deletion of internal files which leads to remote command execution in gogs.io/gogs...
GO-2025-3778 Gogs XSS allowed by stored call in PDF renderer in gogs.io/gogs
Gogs XSS allowed by stored call in PDF renderer in gogs.io/gogs...
Improper Access Control
gogs.io/gogs is vulnerable to improper access control. The vulnerability is due to improper validation and access control in handling file operations within the .git directory, which allowed unprivileged users to perform unauthorized deletions and modifications...
GHSA-XH32-CX6C-CP4V Gogs XSS allowed by stored call in PDF renderer
Summary A stored XSS is present in Gogs which allows client-side Javascript code execution. Details Gogs Version: docker images REPOSITORY TAG IMAGE ID CREATED SIZE gogs/gogs latest fe92583bc4fe 10 hours ago 99.3MB Application version: 0.14.0+dev Local setup using: bash Pull image from Docker Hub...
CVE-2024-56731
Gogs is an open source self-hosted Git service. Prior to version 0.13.3, it's still possible to delete files under the .git directory and achieve remote command execution due to an insufficient patch for CVE-2024-39931. Unprivileged user accounts can execute arbitrary commands on the Gogs instanc...
CVE-2025-47943 Gogs stored XSS in PDF renderer
Gogs is an open source self-hosted Git service. In application version 0.14.0+dev and prior, there is a stored cross-site scripting XSS vulnerability present in Gogs, which allows client-side Javascript code execution. The vulnerability is caused by the usage of a vulnerable and outdated componen...
CVE-2025-47943
CVE-2025-47943 affects Gogs (self-hosted Git service). The vulnerability is a stored XSS in the PDF rendering path, caused by an outdated pdfjs-1.4.20 component located under public/plugins/. Affected versions are 0.14.0+dev and prior. The issue has been fixed in gogs.io/gogs with version 0.13.3 ...
CVE-2025-47943 Gogs stored XSS in PDF renderer
Gogs is an open source self-hosted Git service. In application version 0.14.0+dev and prior, there is a stored cross-site scripting XSS vulnerability present in Gogs, which allows client-side Javascript code execution. The vulnerability is caused by the usage of a vulnerable and outdated componen...
CVE-2024-56731 Gogs deletion of internal files allows remote command execution
Gogs is an open source self-hosted Git service. Prior to version 0.13.3, it's still possible to delete files under the .git directory and achieve remote command execution due to an insufficient patch for CVE-2024-39931. Unprivileged user accounts can execute arbitrary commands on the Gogs instanc...