Login Request a demo
GO
Vendor
gogs
1 product with CVEs on record
74
CVEs
1
On KEV
1
New 30D
Products
GO
gogs
gogs
10.0
74 CVEs1 on KEV1 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2026-82402
GO
gogs
gogs
5.3
0%
Oct 14Gogs: Open Redirect in /redirect endpoint via backslash bypass in `IsSameSite`
CVE-2026-52797
GO
gogs
gogs
8.5
1%
Jun 24Gogs: Overwriting critical files results in a denial of service
CVE-2026-52813
GO
gogs
gogs
10.0
1%
Jun 24Gogs: Path Traversal in organization name results in RCE through Git hooks
CVE-2026-52812
GO
gogs
gogs
7.1
0%
Jun 24Gogs: LFS dedupe path leaks private repo content across tenants
CVE-2026-52811
GO
gogs
gogs
9.0
0%
Jun 24Gogs: UploadRepoFiles writes outside repo working tree via committed parent sym
CVE-2026-52810
GO
gogs
gogs
7.1
0%
Jun 24Gogs: Write to readonly repositories using receive-pack + service=git-upload-pack confusion
CVE-2026-52809
GO
gogs
gogs
6.8
0%
Jun 24Gogs: Password-reset tokens use account-activation lifetime, ignoring RESET_PASSWORD_CODE_LIVES
CVE-2026-52808
GO
gogs
gogs
7.1
0%
Jun 24Gogs: Write-level collaborators can mutate admin-only repository settings via API
CVE-2026-52816
GO
gogs
gogs
5.4
1%
Jun 24Gogs: Unauthenticated Jupyter Notebook (ipynb) Sanitizer allows arbitrary data: URIs leading to XSS
CVE-2026-52807
GO
gogs
gogs
4.8
0%
Jun 24Gogs: DOM-based XSS via Milestone Name on New Issue Page
CVE-2026-52805
GO
gogs
gogs
8.7
0%
Jun 24Gogs: Migration Redirect Bypass Leads to Internal Repository Theft
CVE-2026-52806
GO
gogs
gogs
9.9
8%
Jun 24Gogs: RCE via git rebase --exec argument injection in pull request merge
CVE-2026-52804
GO
gogs
gogs
5.5
0%
Jun 24Gogs: Privilege Escalation via Collaboration Access Mode Validation
CVE-2026-52799
GO
gogs
gogs
7.5
0%
Jun 24Gogs: Missing Authorization in Attachment Download
CVE-2026-52801
GO
gogs
gogs
8.1
1%
Jun 24Gogs: Ability to import local repositories via Mirror Settings
CVE-2026-52800
GO
gogs
gogs
8.8
0%
Jun 24Gogs: CSRF Leading to Organization Owner Takeover
CVE-2026-52802
GO
gogs
gogs
5.4
1%
Jun 24Gogs: Open Redirect via redirect_to in Gogs
CVE-2026-52814
GO
gogs
gogs
5.5
1%
Jun 24Gogs: Unauthenticated Asymmetric Denial of Service (DoS) via SSH Handshake Stall (File Descriptor Exhaustion)
CVE-2026-52798
GO
gogs
gogs
8.9
0%
Jun 24Gogs: Stored XSS in `.ipynb` Preview
CVE-2026-52796
GO
gogs
gogs
3.5
0%
Jun 24Gogs: DoS in rendering issue index pattern
CVE-2026-47267
GO
gogs
gogs
8.3
0%
Jun 24Gogs: SSRF in webhook deliveries
CVE-2026-25119
GO
gogs
gogs
7.7
1%
Jun 24Gogs: Authentication Bypass via Unvalidated Reverse Proxy Headers
CVE-2026-52795
GO
gogs
gogs
4.3
0%
Jun 24Gogs: Authorization Bypass in Watch API allows any user to monitor private repository activity
CVE-2025-64719
GO
gogs
gogs
4.9
0%
Jun 24Gogs: Denial of Service in repository/wiki file listing web pages
CVE-2026-52815
GO
gogs
gogs
5.5
1%
Jun 24Gogs: Unauthenticated Organization Teams Information Disclosure via API
CVE-2026-26276
GO
gogs
gogs
5.4
0%
Mar 5Gogs: DOM-based XSS via milestone selection
CVE-2026-26196
GO
gogs
gogs
5.3
0%
Mar 5Gogs: Access tokens get exposed through URL params in API requests
CVE-2026-26195
GO
gogs
gogs
6.1
0%
Mar 5Gogs: Stored XSS in branch and wiki views through author and committer names
CVE-2026-26194
GO
gogs
gogs
7.3
1%
Mar 5Gogs: Release tag option injection in release deletion
CVE-2026-25921
GO
gogs
gogs
9.3
0%
Mar 5Gogs: Cross-repository LFS object overwrite via missing content hash verification
CVE-2026-26022
GO
gogs
gogs
5.4
0%
Mar 5Gogs: Stored XSS via data URI in issue comments
CVE-2026-25229
GO
gogs
gogs
6.5
0%
Feb 19Gogs Authorization Bypass Allows Cross-Repository Label Modification
CVE-2026-25242
GO
gogs
gogs
9.8
1%
Feb 19Gogs allows unauthenticated file uploads
CVE-2026-25232
GO
gogs
gogs
8.8
0%
Feb 19Gogs has a Protected Branch Deletion Bypass in Web Interface
CVE-2026-25120
GO
gogs
gogs
2.7
0%
Feb 19Gogs Allows Cross-Repository Comment Deletion via DeleteComment
CVE-2026-24135
GO
gogs
gogs
8.1
1%
Feb 6Gogs vulnerable to arbitrary file deletion via path traversal in wiki page update
CVE-2026-23633
GO
gogs
gogs
6.5
1%
Feb 6Gogs has arbitrary file read/write via path traversal in Git hook editing
CVE-2026-23632
GO
gogs
gogs
6.5
0%
Feb 6Gogs user can update repository content with read-only permission
CVE-2026-22592
GO
gogs
gogs
6.5
0%
Feb 6Gogs is Vulnerable to Denial of Service
CVE-2025-64175
GO
gogs
gogs
8.8
0%
Feb 6Gogs Vulnerable to 2FA Bypass via Recovery Code
CVE-2025-64111
GO
gogs
gogs
9.8
1%
Feb 6Gogs's update .git/config file allows remote command execution
CVE-2025-8110
In wildKEV
GO
Gogs
Gogs
8.8
85%
Dec 10File overwrite in file update API in Gogs
CVE-2024-56731
GO
Gogs
Gogs
9.8
1%
Jun 24Gogs is an open source self-hosted Git service
CVE-2024-55947
GO
gogs
gogs
8.8
78%
Dec 23Gogs has a Path Traversal in file update API
CVE-2024-54148
GO
gogs
gogs
9.8
1%
Dec 23Gogs has a Path Traversal in file editing UI
CVE-2024-44625
GO
Gogs
Gogs
8.8
17%
Nov 15Gogs <=0.13.0 is vulnerable to Directory Traversal via the editFilePost function of internal/route/repo/editor.go
CVE-2022-1884
GO
Gogs
Gogs
9.8
2%
Nov 15A remote command execution vulnerability exists in gogs/gogs versions <=0.12.7 when deployed on a Windows server
CVE-2024-39933
GO
Gogs
Gogs
7.7
1%
Jul 4Gogs through 0.13.0 allows argument injection during the tagging of a new release
CVE-2024-39932
GO
Gogs
Gogs
9.9
16%
Jul 4Gogs through 0.13.0 allows argument injection during the previewing of changes
CVE-2024-39931
GO
Gogs
Gogs
9.9
53%
Jul 4Gogs through 0.13.0 allows deletion of internal files
CVE-2024-39930
GO
Gogs
Gogs
9.9
8%
Jul 4The built-in SSH server of Gogs through 0.13.0 allows argument injection in internal/ssh/ssh.go, leading to remote code execution
CVE-2022-2024
GO
Gogs
Gogs
9.8
98%
Feb 25OS Command Injection in GitHub repository gogs/gogs prior to 0.12.11
CVE-2022-32174
GO
gogs
gogs
9.0
58%
Oct 11In Gogs, versions v0.6.5 through v0.12.10 are vulnerable to Stored Cross-Site Scripting (XSS) that leads to an account takeover.
CVE-2022-31038
GO
Gogs
Gogs
5.4
1%
Jun 9Gogs is an open source self-hosted Git service
CVE-2022-1993
GO
Gogs
Gogs
8.1
36%
Jun 9Path Traversal in GitHub repository gogs/gogs prior to 0.12.9
CVE-2022-1992
GO
Gogs
Gogs
9.1
2%
Jun 9Path Traversal in GitHub repository gogs/gogs prior to 0.12.9
CVE-2022-1986
GO
Gogs
Gogs
9.8
4%
Jun 9OS Command Injection in GitHub repository gogs/gogs prior to 0.12.9
CVE-2021-32546
GO
Gogs
Gogs
8.8
2%
Jun 2Missing input validation in internal/db/repo_editor.go in Gogs before 0.12.8 allows an attacker to execute code remotely
CVE-2022-1285
GO
Gogs
Gogs
6.5
1%
Jun 1Server-Side Request Forgery (SSRF) in GitHub repository gogs/gogs prior to 0.12.8
CVE-2022-1464
GO
Gogs
Gogs
5.4
1%
May 5Stored xss bug in GitHub repository gogs/gogs prior to 0.12.7