The vulnerability in the application software interface of the PutContents tool, which is used for creating self-managed Git repositories like Gogs, allows a perpetrator to execute arbitrary code.

The vulnerability of the PutContents application programming interface of the Gogs self-managed Git repository creation tool is related to an incorrect limitation on the path name for the directory. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code by introduci...

GHSA-MQ8M-42GH-WQ7R Gogs vulnerable to a bypass of CVE-2024-55947

Improper Symbolic link handling in the PutContents API in Gogs allows Local Execution of Code...

CVE-2025-8110

Improper Symbolic link handling in the PutContents API in Gogs allows Local Execution of Code...