8 matches found
CVE-2024-39933
Gogs through 0.13.0 allows argument injection during the tagging of a new release...
EUVD-2024-3599
Malicious code in bioql PyPI...
GO-2024-2972 Gogs allows argument injection during the tagging of a new release in github.com/gogs/gogs
Gogs allows argument injection during the tagging of a new release in github.com/gogs/gogs...
CVE-2024-39933
Gogs through 0.13.0 allows argument injection during the tagging of a new release...
CVE-2024-39933
Gogs through 0.13.0 allows argument injection during the tagging of a new release...
CVE-2024-39933
Gogs through 0.13.0 allows argument injection during the tagging of a new release...
CVE-2024-39933
CVE-2024-39933 affects the Gogs project (up to version 0.13.0). The issue is described as argument injection during the tagging of a new release, with a known patching path: upgrade to 0.13.1 or the latest 0.14.0+dev to mitigate. The connected advisories corroborate this as a Gogs vulnerability a...
PT-2023-9259
Name of the Vulnerable Software and Affected Versions Gogs versions 0.13.0 and earlier Description The issue is related to argument injection during the tagging of a new release. This could allow a remote attacker to disclose protected information. Unprivileged user accounts with at least one SSH...