CVE-2026-123012

In Gogs version 0.14.3 , a vulnerability exists in the Git Smart HTTP authorization layer located in internal/route/repo/http.go. The root cause is an inconsistency in case-sensitive verb checking , which allows an attacker to perform a push operation when only read access was intended. No specif...

EUVD-2026-117331

In Gogs 0.14.3, the Git Smart HTTP authorization layer in internal/route/repo/http.go allows a push when only read access was intended, a different vulnerability than CVE-2026-52810. This occurs because of inconsistency about whether a verb is checked in a case-sensitive manner...