public

  GO-2022-0471: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0473: Cross site scripting via cookies in gogs in gogs.io/gogs

  GO-2022-0483: Cross-site Scripting vulnerability in repository issue list in Gogs in gogs.io/gogs

  GO-2022-0556: OS Command Injection in file editor in Gogs in gogs.io/gogs

  GO-2022-0562: Path Traversal in Git HTTP endpoints in Gogs in gogs.io/gogs

  GO-2022-0570: Path Traversal in file editor on Windows in Gogs in gogs.io/gogs

  GO-2022-0583: Server-Side Request Forgery in gogs webhook in gogs.io/gogs

  GO-2022-0749: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-1060: Gogs vulnerable to Cross-site Scripting in gogs.io/gogs

  GO-2023-1596: Gogs OS Command Injection vulnerability in gogs.io/gogs

  GO-2024-3275: Unpatched Remote Code Execution in Gogs in gogs.io/gogs

  GO-2024-3355: Remote Command Execution in file editing in gogs in gogs.io/gogs

  GO-2024-3356: Path Traversal in file update API in gogs in gogs.io/gogs

  GO-2025-3776: Gogs allows deletion of internal files which leads to remote command execution in gogs.io/gogs

  GO-2025-3778: Gogs XSS allowed by stored call in PDF renderer in gogs.io/gogs