Affected by GO-2022-1060
and 20 other vulnerabilities
GO-2022-1060 : Gogs vulnerable to Cross-site Scripting in gogs.io/gogs
GO-2024-3275 : Unpatched Remote Code Execution in Gogs in gogs.io/gogs
GO-2025-4225 : Gogs vulnerable to a bypass of CVE-2024-55947 in gogs.io/gogs
GO-2026-4448 : Gogs's update .git/config file allows remote command execution in gogs.io/gogs
GO-2026-4449 : Gogs Vulnerable to 2FA Bypass via Recovery Code in gogs.io/gogs
GO-2026-4450 : Gogs user can update repository content with read-only permission in gogs.io/gogs
GO-2026-4451 : Gogs has a Denial of Service issue in gogs.io/gogs
GO-2026-4452 : Gogs vulnerable to arbitrary file deletion via Path Traversal in wiki page update in gogs.io/gogs
GO-2026-4453 : Gogs has arbitrary file read/write via Path Traversal in Git hook editing in gogs.io/gogs
GO-2026-4454 : Gogs vulnerable to Stored XSS via Mermaid diagrams in gogs.io/gogs
GO-2026-4457 : Gogs has authorization bypass in repository deletion API in gogs.io/gogs
GO-2026-4498 : Gogs has a Protected Branch Deletion Bypass in Web Interface in gogs.io/gogs
GO-2026-4499 : Gogs has an Authorization Bypass Allows Cross-Repository Label Modification in Gogs in gogs.io/gogs
GO-2026-4500 : Unauthenticated File Upload in Gogs in gogs.io/gogs
GO-2026-4501 : Gogs Allows Cross-Repository Comment Deletion via DeleteComment in gogs.io/gogs
GO-2026-4616 : Gogs: Cross-repository LFS object overwrite via missing content hash verification in gogs.io/gogs
GO-2026-4617 : Gogs: Release tag option injection in release deletion in gogs.io/gogs
GO-2026-4618 : Gogs: Stored XSS in branch and wiki views through author and committer names in gogs.io/gogs
GO-2026-4619 : Gogs: Access tokens get exposed through URL params in API requests in gogs.io/gogs
GO-2026-4620 : Gogs: Stored XSS via data URI in issue comments in gogs.io/gogs
GO-2026-4627 : Gogs: DOM-based XSS via milestone selection in gogs.io/gogs
Discover Packages
gogs.io/gogs
command
module
Version:
v0.13.3
Opens a new window with list of versions in this module.
Published: Jun 8, 2025
License: MIT
Opens a new window with license information.
Imports: 5
Opens a new window with list of imports.
Imported by: 1
Opens a new window with list of known importers.
README
README
ยถ
็ฎไฝไธญๆ
๐ฎ Vision
The Gogs (/gษgz/) project aims to build a simple, stable and extensible self-hosted Git service that can be set up in the most painless way. With Go, this can be done with an independent binary distribution across all platforms that Go supports, including Linux, macOS, Windows and ARM-based systems.
๐ก Overview
๐ Features
User dashboard, user profile and activity timeline.
Access repositories via SSH, HTTP and HTTPS protocols.
User, organization and repository management.
Repository and organization webhooks, including Slack, Discord and Dingtalk.
Repository Git hooks, deploy keys and Git LFS.
Repository issues, pull requests, wiki, protected branches and collaboration.
Migrate and mirror repositories with wiki from other code hosts.
Web editor for quick editing repository files and wiki.
Jupyter Notebook and PDF rendering.
Authentication via SMTP, LDAP, reverse proxy, GitHub.com and GitHub Enterprise with 2FA.
Customize HTML templates, static files and many others.
Rich database backend, including PostgreSQL, MySQL, SQLite3 and TiDB .
Have localization over 31 languages .
๐พ Hardware requirements
A Raspberry Pi or $5 Digital Ocean Droplet is more than enough to get you started. Some even use 64MB RAM Docker CaaS .
2 CPU cores and 512MB RAM would be the baseline for teamwork.
Increase CPU cores when your team size gets significantly larger, memory footprint remains low.
๐ป Browser support
Please see Semantic UI for specific versions of supported browsers.
The smallest resolution officially supported is 1024*768 , however the UI may still look right in smaller resolutions, but no promises or fixes.
๐ Installation
Make sure you install the prerequisites first.
There are 6 ways to install Gogs:
Deploy to cloud
Tutorials
๐ฆ Software, service and product support
๐โโ๏ธ Acknowledgments
๐ Contributors
โ๏ธ License
This project is under the MIT License. See the LICENSE file for the full license text.
Expand โพ
Collapse โด
Documentation
ยถ
Gogs is a painless self-hosted Git Service.
Source Files
ยถ
Directories
ยถ
internal
auth/ldap
Package ldap provide functions & structure to query a LDAP ldap directory.
Package ldap provide functions & structure to query a LDAP ldap directory.
lazyregexp
Package lazyregexp is a thin wrapper over regexp, allowing the use of global regexp variables without forcing them to be compiled at init.
Package lazyregexp is a thin wrapper over regexp, allowing the use of global regexp variables without forcing them to be compiled at init.
Click to show internal directories.
Click to hide internal directories.