59 matches found
PT-2026-51629
Name of the Vulnerable Software and Affected Versions Gogs versions prior to 0.14.3 Description An issue exists in the Repository.UploadRepoFiles function where symlink checks are performed only on the leaf of the upload target using osx.IsSymlinktargetPath, unlike other functions that validate...
GitPython 路径遍历漏洞
GitPython is a Python library developed by gitpython-developers, designed for interacting with Git repositories. Versions of GitPython prior to 3.1.48 contained a path traversal vulnerability. This vulnerability stemmed from insufficient validation of reference paths during reference creation,...
GHSA-5QHX-GWFJ-6JQR Gogs user can update repository content with read-only permission
Vulnerability Description The endpoint PUT /repos/:owner/:repo/contents/ does not require write permissions and allows access with read permission only via repoAssignment. After passing the permission check, PutContents invokes UpdateRepoFile, which results in: Commit creation Execution of git pu...
CVE-2022-31578
The piaoyunsoft/btlnmp repository through 2019-10-10 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...
CVE-2022-0986
Reflected Cross-site Scripting XSS Vulnerability in GitHub repository hestiacp/hestiacp prior to 1.5.11...
CVE-2021-22200
An issue has been discovered in GitLab CE/EE affecting all versions starting with 12.6. Under a special condition it was possible to access data of an internal repository through a public project fork as an anonymous user...
EUVD-2021-1119
Malware in sbrugna...
EUVD-2004-1435
Malware in sbrugna...
EUVD-2023-1147
Malicious code in bioql PyPI...
EUVD-2023-0811
Malicious code in bioql PyPI...
EUVD-2025-20825
Malicious code in bioql PyPI...
EUVD-2023-2583
Malicious code in bioql PyPI...
EUVD-2025-13599
Malicious code in bioql PyPI...
EUVD-2022-52993
Malicious code in bioql PyPI...
EUVD-2023-1602
Malicious code in bioql PyPI...
EUVD-2025-22775
Malicious code in bioql PyPI...
EUVD-2022-53014
Malicious code in bioql PyPI...
EUVD-2023-0590
Malicious code in bioql PyPI...