user

Jun 10, 2017 GO-2022-0369 +19 more

  GO-2022-0369: Gogs vulnerable to improper PAM authorization handling in gogs.io/gogs

  GO-2022-0377: SSRF in repository migration in gogs.io/gogs

  GO-2022-0471: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0473: Cross site scripting via cookies in gogs in gogs.io/gogs

  GO-2022-0483: Cross-site Scripting vulnerability in repository issue list in Gogs in gogs.io/gogs

  GO-2022-0554: Unrestricted Upload of File with Dangerous Type in Gogs in gogs.io/gogs

  GO-2022-0556: OS Command Injection in file editor in Gogs in gogs.io/gogs

  GO-2022-0562: Path Traversal in Git HTTP endpoints in Gogs in gogs.io/gogs

  GO-2022-0566: SSRF in repository migration in gogs.io/gogs

  GO-2022-0570: Path Traversal in file editor on Windows in Gogs in gogs.io/gogs

  GO-2022-0583: Server-Side Request Forgery in gogs webhook in gogs.io/gogs

  GO-2022-0597: Cross-site Scripting in Gogs in gogs.io/gogs

  GO-2022-0749: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0788: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0797: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0822: Open Redirect in gogs.io/gogs

  GO-2022-1060: Gogs vulnerable to Cross-site Scripting in gogs.io/gogs

  GO-2023-1596: Gogs OS Command Injection vulnerability in gogs.io/gogs

  GO-2023-1971: Gogs and Gitea SSRF Vulnerability in code.gitea.io/gitea

  GO-2023-1972: Gogs XSS Vulnerability in gogs.io/gogs

Changes in this version

+ const LOGIN

+ const SETTINGS_TWO_FACTOR_ENABLE

+ const SETTINGS_TWO_FACTOR_RECOVERY_CODES

+ const TWO_FACTOR

+ const TWO_FACTOR_RECOVERY_CODE

+ func AutoLogin(c *context.Context) (bool, error)

+ func Login(c *context.Context)

+ func LoginPost(c *context.Context, f form.SignIn)

+ func LoginTwoFactor(c *context.Context)

+ func LoginTwoFactorPost(c *context.Context)

+ func LoginTwoFactorRecoveryCode(c *context.Context)

+ func LoginTwoFactorRecoveryCodePost(c *context.Context)

+ func SettingsSecurity(c *context.Context)

+ func SettingsTwoFactorDisable(c *context.Context)

+ func SettingsTwoFactorEnable(c *context.Context)

+ func SettingsTwoFactorEnablePost(c *context.Context)

+ func SettingsTwoFactorRecoveryCodes(c *context.Context)

+ func SettingsTwoFactorRecoveryCodesPost(c *context.Context)

Apr 5, 2017 GO-2022-0369 +19 more

  GO-2022-0369: Gogs vulnerable to improper PAM authorization handling in gogs.io/gogs

  GO-2022-0377: SSRF in repository migration in gogs.io/gogs

  GO-2022-0471: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0473: Cross site scripting via cookies in gogs in gogs.io/gogs

  GO-2022-0483: Cross-site Scripting vulnerability in repository issue list in Gogs in gogs.io/gogs

  GO-2022-0554: Unrestricted Upload of File with Dangerous Type in Gogs in gogs.io/gogs

  GO-2022-0556: OS Command Injection in file editor in Gogs in gogs.io/gogs

  GO-2022-0562: Path Traversal in Git HTTP endpoints in Gogs in gogs.io/gogs

  GO-2022-0566: SSRF in repository migration in gogs.io/gogs

  GO-2022-0570: Path Traversal in file editor on Windows in Gogs in gogs.io/gogs

  GO-2022-0583: Server-Side Request Forgery in gogs webhook in gogs.io/gogs

  GO-2022-0597: Cross-site Scripting in Gogs in gogs.io/gogs

  GO-2022-0749: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0788: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0797: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0822: Open Redirect in gogs.io/gogs

  GO-2022-1060: Gogs vulnerable to Cross-site Scripting in gogs.io/gogs

  GO-2023-1596: Gogs OS Command Injection vulnerability in gogs.io/gogs

  GO-2023-1971: Gogs and Gitea SSRF Vulnerability in code.gitea.io/gitea

  GO-2023-1972: Gogs XSS Vulnerability in gogs.io/gogs

Changes in this version

+ const NEWS_FEED

+ const SETTINGS_REPOSITORIES

+ const SETTINGS_SECURITY

+ func SettingsLeaveRepo(ctx *context.Context)

+ func SettingsRepos(ctx *context.Context)

Mar 14, 2017 GO-2022-0369 +19 more

  GO-2022-0369: Gogs vulnerable to improper PAM authorization handling in gogs.io/gogs

  GO-2022-0377: SSRF in repository migration in gogs.io/gogs

  GO-2022-0471: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0473: Cross site scripting via cookies in gogs in gogs.io/gogs

  GO-2022-0483: Cross-site Scripting vulnerability in repository issue list in Gogs in gogs.io/gogs

  GO-2022-0554: Unrestricted Upload of File with Dangerous Type in Gogs in gogs.io/gogs

  GO-2022-0556: OS Command Injection in file editor in Gogs in gogs.io/gogs

  GO-2022-0562: Path Traversal in Git HTTP endpoints in Gogs in gogs.io/gogs

  GO-2022-0566: SSRF in repository migration in gogs.io/gogs

  GO-2022-0570: Path Traversal in file editor on Windows in Gogs in gogs.io/gogs

  GO-2022-0583: Server-Side Request Forgery in gogs webhook in gogs.io/gogs

  GO-2022-0597: Cross-site Scripting in Gogs in gogs.io/gogs

  GO-2022-0749: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0788: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0797: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0822: Open Redirect in gogs.io/gogs

  GO-2022-1060: Gogs vulnerable to Cross-site Scripting in gogs.io/gogs

  GO-2023-1596: Gogs OS Command Injection vulnerability in gogs.io/gogs

  GO-2023-1971: Gogs and Gitea SSRF Vulnerability in code.gitea.io/gitea

  GO-2023-1972: Gogs XSS Vulnerability in gogs.io/gogs

Mar 7, 2017 GO-2022-0369 +19 more

  GO-2022-0369: Gogs vulnerable to improper PAM authorization handling in gogs.io/gogs

  GO-2022-0377: SSRF in repository migration in gogs.io/gogs

  GO-2022-0471: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0473: Cross site scripting via cookies in gogs in gogs.io/gogs

  GO-2022-0483: Cross-site Scripting vulnerability in repository issue list in Gogs in gogs.io/gogs

  GO-2022-0554: Unrestricted Upload of File with Dangerous Type in Gogs in gogs.io/gogs

  GO-2022-0556: OS Command Injection in file editor in Gogs in gogs.io/gogs

  GO-2022-0562: Path Traversal in Git HTTP endpoints in Gogs in gogs.io/gogs

  GO-2022-0566: SSRF in repository migration in gogs.io/gogs

  GO-2022-0570: Path Traversal in file editor on Windows in Gogs in gogs.io/gogs

  GO-2022-0583: Server-Side Request Forgery in gogs webhook in gogs.io/gogs

  GO-2022-0597: Cross-site Scripting in Gogs in gogs.io/gogs

  GO-2022-0749: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0788: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0797: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0822: Open Redirect in gogs.io/gogs

  GO-2022-1060: Gogs vulnerable to Cross-site Scripting in gogs.io/gogs

  GO-2023-1596: Gogs OS Command Injection vulnerability in gogs.io/gogs

  GO-2023-1971: Gogs and Gitea SSRF Vulnerability in code.gitea.io/gitea

  GO-2023-1972: Gogs XSS Vulnerability in gogs.io/gogs

Feb 28, 2017 GO-2022-0369 +19 more

  GO-2022-0369: Gogs vulnerable to improper PAM authorization handling in gogs.io/gogs

  GO-2022-0377: SSRF in repository migration in gogs.io/gogs

  GO-2022-0471: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0473: Cross site scripting via cookies in gogs in gogs.io/gogs

  GO-2022-0483: Cross-site Scripting vulnerability in repository issue list in Gogs in gogs.io/gogs

  GO-2022-0554: Unrestricted Upload of File with Dangerous Type in Gogs in gogs.io/gogs

  GO-2022-0556: OS Command Injection in file editor in Gogs in gogs.io/gogs

  GO-2022-0562: Path Traversal in Git HTTP endpoints in Gogs in gogs.io/gogs

  GO-2022-0566: SSRF in repository migration in gogs.io/gogs

  GO-2022-0570: Path Traversal in file editor on Windows in Gogs in gogs.io/gogs

  GO-2022-0583: Server-Side Request Forgery in gogs webhook in gogs.io/gogs

  GO-2022-0597: Cross-site Scripting in Gogs in gogs.io/gogs

  GO-2022-0749: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0788: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0797: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0822: Open Redirect in gogs.io/gogs

  GO-2022-1060: Gogs vulnerable to Cross-site Scripting in gogs.io/gogs

  GO-2023-1596: Gogs OS Command Injection vulnerability in gogs.io/gogs

  GO-2023-1971: Gogs and Gitea SSRF Vulnerability in code.gitea.io/gitea

  GO-2023-1972: Gogs XSS Vulnerability in gogs.io/gogs

Feb 11, 2017 GO-2022-0369 +19 more

  GO-2022-0369: Gogs vulnerable to improper PAM authorization handling in gogs.io/gogs

  GO-2022-0377: SSRF in repository migration in gogs.io/gogs

  GO-2022-0471: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0473: Cross site scripting via cookies in gogs in gogs.io/gogs

  GO-2022-0483: Cross-site Scripting vulnerability in repository issue list in Gogs in gogs.io/gogs

  GO-2022-0554: Unrestricted Upload of File with Dangerous Type in Gogs in gogs.io/gogs

  GO-2022-0556: OS Command Injection in file editor in Gogs in gogs.io/gogs

  GO-2022-0562: Path Traversal in Git HTTP endpoints in Gogs in gogs.io/gogs

  GO-2022-0566: SSRF in repository migration in gogs.io/gogs

  GO-2022-0570: Path Traversal in file editor on Windows in Gogs in gogs.io/gogs

  GO-2022-0583: Server-Side Request Forgery in gogs webhook in gogs.io/gogs

  GO-2022-0597: Cross-site Scripting in Gogs in gogs.io/gogs

  GO-2022-0749: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0788: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0797: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0822: Open Redirect in gogs.io/gogs

  GO-2022-1060: Gogs vulnerable to Cross-site Scripting in gogs.io/gogs

  GO-2023-1596: Gogs OS Command Injection vulnerability in gogs.io/gogs

  GO-2023-1971: Gogs and Gitea SSRF Vulnerability in code.gitea.io/gitea

  GO-2023-1972: Gogs XSS Vulnerability in gogs.io/gogs

Jan 31, 2017 GO-2022-0369 +19 more

  GO-2022-0369: Gogs vulnerable to improper PAM authorization handling in gogs.io/gogs

  GO-2022-0377: SSRF in repository migration in gogs.io/gogs

  GO-2022-0471: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0473: Cross site scripting via cookies in gogs in gogs.io/gogs

  GO-2022-0483: Cross-site Scripting vulnerability in repository issue list in Gogs in gogs.io/gogs

  GO-2022-0554: Unrestricted Upload of File with Dangerous Type in Gogs in gogs.io/gogs

  GO-2022-0556: OS Command Injection in file editor in Gogs in gogs.io/gogs

  GO-2022-0562: Path Traversal in Git HTTP endpoints in Gogs in gogs.io/gogs

  GO-2022-0566: SSRF in repository migration in gogs.io/gogs

  GO-2022-0570: Path Traversal in file editor on Windows in Gogs in gogs.io/gogs

  GO-2022-0583: Server-Side Request Forgery in gogs webhook in gogs.io/gogs

  GO-2022-0597: Cross-site Scripting in Gogs in gogs.io/gogs

  GO-2022-0749: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0788: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0797: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0822: Open Redirect in gogs.io/gogs

  GO-2022-1060: Gogs vulnerable to Cross-site Scripting in gogs.io/gogs

  GO-2023-1596: Gogs OS Command Injection vulnerability in gogs.io/gogs

  GO-2023-1971: Gogs and Gitea SSRF Vulnerability in code.gitea.io/gitea

  GO-2023-1972: Gogs XSS Vulnerability in gogs.io/gogs

Changes in this version

+ const SETTINGS_ORGANIZATIONS

+ func SettingsLeaveOrganization(ctx *context.Context)

+ func SettingsOrganizations(ctx *context.Context)

Dec 24, 2016 GO-2022-0369 +19 more

  GO-2022-0369: Gogs vulnerable to improper PAM authorization handling in gogs.io/gogs

  GO-2022-0377: SSRF in repository migration in gogs.io/gogs

  GO-2022-0471: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0473: Cross site scripting via cookies in gogs in gogs.io/gogs

  GO-2022-0483: Cross-site Scripting vulnerability in repository issue list in Gogs in gogs.io/gogs

  GO-2022-0554: Unrestricted Upload of File with Dangerous Type in Gogs in gogs.io/gogs

  GO-2022-0556: OS Command Injection in file editor in Gogs in gogs.io/gogs

  GO-2022-0562: Path Traversal in Git HTTP endpoints in Gogs in gogs.io/gogs

  GO-2022-0566: SSRF in repository migration in gogs.io/gogs

  GO-2022-0570: Path Traversal in file editor on Windows in Gogs in gogs.io/gogs

  GO-2022-0583: Server-Side Request Forgery in gogs webhook in gogs.io/gogs

  GO-2022-0597: Cross-site Scripting in Gogs in gogs.io/gogs

  GO-2022-0749: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0788: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0797: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0822: Open Redirect in gogs.io/gogs

  GO-2022-1060: Gogs vulnerable to Cross-site Scripting in gogs.io/gogs

  GO-2023-1596: Gogs OS Command Injection vulnerability in gogs.io/gogs

  GO-2023-1971: Gogs and Gitea SSRF Vulnerability in code.gitea.io/gitea

  GO-2023-1972: Gogs XSS Vulnerability in gogs.io/gogs

Sep 1, 2016 GO-2022-0369 +19 more

  GO-2022-0369: Gogs vulnerable to improper PAM authorization handling in gogs.io/gogs

  GO-2022-0377: SSRF in repository migration in gogs.io/gogs

  GO-2022-0471: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0473: Cross site scripting via cookies in gogs in gogs.io/gogs

  GO-2022-0483: Cross-site Scripting vulnerability in repository issue list in Gogs in gogs.io/gogs

  GO-2022-0554: Unrestricted Upload of File with Dangerous Type in Gogs in gogs.io/gogs

  GO-2022-0556: OS Command Injection in file editor in Gogs in gogs.io/gogs

  GO-2022-0562: Path Traversal in Git HTTP endpoints in Gogs in gogs.io/gogs

  GO-2022-0566: SSRF in repository migration in gogs.io/gogs

  GO-2022-0570: Path Traversal in file editor on Windows in Gogs in gogs.io/gogs

  GO-2022-0583: Server-Side Request Forgery in gogs webhook in gogs.io/gogs

  GO-2022-0597: Cross-site Scripting in Gogs in gogs.io/gogs

  GO-2022-0749: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0788: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0797: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0822: Open Redirect in gogs.io/gogs

  GO-2022-1060: Gogs vulnerable to Cross-site Scripting in gogs.io/gogs

  GO-2023-1596: Gogs OS Command Injection vulnerability in gogs.io/gogs

  GO-2023-1971: Gogs and Gitea SSRF Vulnerability in code.gitea.io/gitea

  GO-2023-1972: Gogs XSS Vulnerability in gogs.io/gogs

Aug 10, 2016 GO-2022-0369 +19 more

  GO-2022-0369: Gogs vulnerable to improper PAM authorization handling in gogs.io/gogs

  GO-2022-0377: SSRF in repository migration in gogs.io/gogs

  GO-2022-0471: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0473: Cross site scripting via cookies in gogs in gogs.io/gogs

  GO-2022-0483: Cross-site Scripting vulnerability in repository issue list in Gogs in gogs.io/gogs

  GO-2022-0554: Unrestricted Upload of File with Dangerous Type in Gogs in gogs.io/gogs

  GO-2022-0556: OS Command Injection in file editor in Gogs in gogs.io/gogs

  GO-2022-0562: Path Traversal in Git HTTP endpoints in Gogs in gogs.io/gogs

  GO-2022-0566: SSRF in repository migration in gogs.io/gogs

  GO-2022-0570: Path Traversal in file editor on Windows in Gogs in gogs.io/gogs

  GO-2022-0583: Server-Side Request Forgery in gogs webhook in gogs.io/gogs

  GO-2022-0597: Cross-site Scripting in Gogs in gogs.io/gogs

  GO-2022-0749: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0788: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0797: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0822: Open Redirect in gogs.io/gogs

  GO-2022-1060: Gogs vulnerable to Cross-site Scripting in gogs.io/gogs

  GO-2023-1596: Gogs OS Command Injection vulnerability in gogs.io/gogs

  GO-2023-1971: Gogs and Gitea SSRF Vulnerability in code.gitea.io/gitea

  GO-2023-1972: Gogs XSS Vulnerability in gogs.io/gogs

Changes in this version

+ const SETTINGS_AVATAR

+ func SettingsAvatarPost(ctx *context.Context, form auth.AvatarForm)

Aug 3, 2016 GO-2022-0369 +19 more

  GO-2022-0369: Gogs vulnerable to improper PAM authorization handling in gogs.io/gogs

  GO-2022-0377: SSRF in repository migration in gogs.io/gogs

  GO-2022-0471: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0473: Cross site scripting via cookies in gogs in gogs.io/gogs

  GO-2022-0483: Cross-site Scripting vulnerability in repository issue list in Gogs in gogs.io/gogs

  GO-2022-0554: Unrestricted Upload of File with Dangerous Type in Gogs in gogs.io/gogs

  GO-2022-0556: OS Command Injection in file editor in Gogs in gogs.io/gogs

  GO-2022-0562: Path Traversal in Git HTTP endpoints in Gogs in gogs.io/gogs

  GO-2022-0566: SSRF in repository migration in gogs.io/gogs

  GO-2022-0570: Path Traversal in file editor on Windows in Gogs in gogs.io/gogs

  GO-2022-0583: Server-Side Request Forgery in gogs webhook in gogs.io/gogs

  GO-2022-0597: Cross-site Scripting in Gogs in gogs.io/gogs

  GO-2022-0749: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0788: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0797: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0822: Open Redirect in gogs.io/gogs

  GO-2022-1060: Gogs vulnerable to Cross-site Scripting in gogs.io/gogs

  GO-2023-1596: Gogs OS Command Injection vulnerability in gogs.io/gogs

  GO-2023-1971: Gogs and Gitea SSRF Vulnerability in code.gitea.io/gitea

  GO-2023-1972: Gogs XSS Vulnerability in gogs.io/gogs

Jul 22, 2016 GO-2022-0369 +19 more

  GO-2022-0369: Gogs vulnerable to improper PAM authorization handling in gogs.io/gogs

  GO-2022-0377: SSRF in repository migration in gogs.io/gogs

  GO-2022-0471: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0473: Cross site scripting via cookies in gogs in gogs.io/gogs

  GO-2022-0483: Cross-site Scripting vulnerability in repository issue list in Gogs in gogs.io/gogs

  GO-2022-0554: Unrestricted Upload of File with Dangerous Type in Gogs in gogs.io/gogs

  GO-2022-0556: OS Command Injection in file editor in Gogs in gogs.io/gogs

  GO-2022-0562: Path Traversal in Git HTTP endpoints in Gogs in gogs.io/gogs

  GO-2022-0566: SSRF in repository migration in gogs.io/gogs

  GO-2022-0570: Path Traversal in file editor on Windows in Gogs in gogs.io/gogs

  GO-2022-0583: Server-Side Request Forgery in gogs webhook in gogs.io/gogs

  GO-2022-0597: Cross-site Scripting in Gogs in gogs.io/gogs

  GO-2022-0749: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0788: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0797: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0822: Open Redirect in gogs.io/gogs

  GO-2022-1060: Gogs vulnerable to Cross-site Scripting in gogs.io/gogs

  GO-2023-1596: Gogs OS Command Injection vulnerability in gogs.io/gogs

  GO-2023-1971: Gogs and Gitea SSRF Vulnerability in code.gitea.io/gitea

  GO-2023-1972: Gogs XSS Vulnerability in gogs.io/gogs

Jul 17, 2016 GO-2022-0369 +19 more

  GO-2022-0369: Gogs vulnerable to improper PAM authorization handling in gogs.io/gogs

  GO-2022-0377: SSRF in repository migration in gogs.io/gogs

  GO-2022-0471: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0473: Cross site scripting via cookies in gogs in gogs.io/gogs

  GO-2022-0483: Cross-site Scripting vulnerability in repository issue list in Gogs in gogs.io/gogs

  GO-2022-0554: Unrestricted Upload of File with Dangerous Type in Gogs in gogs.io/gogs

  GO-2022-0556: OS Command Injection in file editor in Gogs in gogs.io/gogs

  GO-2022-0562: Path Traversal in Git HTTP endpoints in Gogs in gogs.io/gogs

  GO-2022-0566: SSRF in repository migration in gogs.io/gogs

  GO-2022-0570: Path Traversal in file editor on Windows in Gogs in gogs.io/gogs

  GO-2022-0583: Server-Side Request Forgery in gogs webhook in gogs.io/gogs

  GO-2022-0597: Cross-site Scripting in Gogs in gogs.io/gogs

  GO-2022-0749: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0788: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0797: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0822: Open Redirect in gogs.io/gogs

  GO-2022-1060: Gogs vulnerable to Cross-site Scripting in gogs.io/gogs

  GO-2023-1596: Gogs OS Command Injection vulnerability in gogs.io/gogs

  GO-2023-1971: Gogs and Gitea SSRF Vulnerability in code.gitea.io/gitea

  GO-2023-1972: Gogs XSS Vulnerability in gogs.io/gogs

Mar 19, 2016 GO-2022-0369 +19 more

  GO-2022-0369: Gogs vulnerable to improper PAM authorization handling in gogs.io/gogs

  GO-2022-0377: SSRF in repository migration in gogs.io/gogs

  GO-2022-0471: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0473: Cross site scripting via cookies in gogs in gogs.io/gogs

  GO-2022-0483: Cross-site Scripting vulnerability in repository issue list in Gogs in gogs.io/gogs

  GO-2022-0554: Unrestricted Upload of File with Dangerous Type in Gogs in gogs.io/gogs

  GO-2022-0556: OS Command Injection in file editor in Gogs in gogs.io/gogs

  GO-2022-0562: Path Traversal in Git HTTP endpoints in Gogs in gogs.io/gogs

  GO-2022-0566: SSRF in repository migration in gogs.io/gogs

  GO-2022-0570: Path Traversal in file editor on Windows in Gogs in gogs.io/gogs

  GO-2022-0583: Server-Side Request Forgery in gogs webhook in gogs.io/gogs

  GO-2022-0597: Cross-site Scripting in Gogs in gogs.io/gogs

  GO-2022-0749: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0788: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0797: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0822: Open Redirect in gogs.io/gogs

  GO-2022-1060: Gogs vulnerable to Cross-site Scripting in gogs.io/gogs

  GO-2023-1596: Gogs OS Command Injection vulnerability in gogs.io/gogs

  GO-2023-1971: Gogs and Gitea SSRF Vulnerability in code.gitea.io/gitea

  GO-2023-1972: Gogs XSS Vulnerability in gogs.io/gogs

Changes in this version

+ func AutoSignIn(ctx *context.Context) (bool, error)

Mar 7, 2016 GO-2022-0369 +19 more

  GO-2022-0369: Gogs vulnerable to improper PAM authorization handling in gogs.io/gogs

  GO-2022-0377: SSRF in repository migration in gogs.io/gogs

  GO-2022-0471: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0473: Cross site scripting via cookies in gogs in gogs.io/gogs

  GO-2022-0483: Cross-site Scripting vulnerability in repository issue list in Gogs in gogs.io/gogs

  GO-2022-0554: Unrestricted Upload of File with Dangerous Type in Gogs in gogs.io/gogs

  GO-2022-0556: OS Command Injection in file editor in Gogs in gogs.io/gogs

  GO-2022-0562: Path Traversal in Git HTTP endpoints in Gogs in gogs.io/gogs

  GO-2022-0566: SSRF in repository migration in gogs.io/gogs

  GO-2022-0570: Path Traversal in file editor on Windows in Gogs in gogs.io/gogs

  GO-2022-0583: Server-Side Request Forgery in gogs webhook in gogs.io/gogs

  GO-2022-0597: Cross-site Scripting in Gogs in gogs.io/gogs

  GO-2022-0749: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0788: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0797: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0822: Open Redirect in gogs.io/gogs

  GO-2022-1060: Gogs vulnerable to Cross-site Scripting in gogs.io/gogs

  GO-2023-1596: Gogs OS Command Injection vulnerability in gogs.io/gogs

  GO-2023-1971: Gogs and Gitea SSRF Vulnerability in code.gitea.io/gitea

  GO-2023-1972: Gogs XSS Vulnerability in gogs.io/gogs

Changes in this version

+ func SettingsDeleteAvatar(ctx *middleware.Context)

Feb 24, 2016 GO-2022-0369 +19 more

  GO-2022-0369: Gogs vulnerable to improper PAM authorization handling in gogs.io/gogs

  GO-2022-0377: SSRF in repository migration in gogs.io/gogs

  GO-2022-0471: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0473: Cross site scripting via cookies in gogs in gogs.io/gogs

  GO-2022-0483: Cross-site Scripting vulnerability in repository issue list in Gogs in gogs.io/gogs

  GO-2022-0554: Unrestricted Upload of File with Dangerous Type in Gogs in gogs.io/gogs

  GO-2022-0556: OS Command Injection in file editor in Gogs in gogs.io/gogs

  GO-2022-0562: Path Traversal in Git HTTP endpoints in Gogs in gogs.io/gogs

  GO-2022-0566: SSRF in repository migration in gogs.io/gogs

  GO-2022-0570: Path Traversal in file editor on Windows in Gogs in gogs.io/gogs

  GO-2022-0583: Server-Side Request Forgery in gogs webhook in gogs.io/gogs

  GO-2022-0597: Cross-site Scripting in Gogs in gogs.io/gogs

  GO-2022-0749: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0788: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0797: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0822: Open Redirect in gogs.io/gogs

  GO-2022-1060: Gogs vulnerable to Cross-site Scripting in gogs.io/gogs

  GO-2023-1596: Gogs OS Command Injection vulnerability in gogs.io/gogs

  GO-2023-1971: Gogs and Gitea SSRF Vulnerability in code.gitea.io/gitea

  GO-2023-1972: Gogs XSS Vulnerability in gogs.io/gogs

Jan 30, 2016 GO-2022-0369 +19 more

  GO-2022-0369: Gogs vulnerable to improper PAM authorization handling in gogs.io/gogs

  GO-2022-0377: SSRF in repository migration in gogs.io/gogs

  GO-2022-0471: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0473: Cross site scripting via cookies in gogs in gogs.io/gogs

  GO-2022-0483: Cross-site Scripting vulnerability in repository issue list in Gogs in gogs.io/gogs

  GO-2022-0554: Unrestricted Upload of File with Dangerous Type in Gogs in gogs.io/gogs

  GO-2022-0556: OS Command Injection in file editor in Gogs in gogs.io/gogs

  GO-2022-0562: Path Traversal in Git HTTP endpoints in Gogs in gogs.io/gogs

  GO-2022-0566: SSRF in repository migration in gogs.io/gogs

  GO-2022-0570: Path Traversal in file editor on Windows in Gogs in gogs.io/gogs

  GO-2022-0583: Server-Side Request Forgery in gogs webhook in gogs.io/gogs

  GO-2022-0597: Cross-site Scripting in Gogs in gogs.io/gogs

  GO-2022-0749: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0788: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0797: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0822: Open Redirect in gogs.io/gogs

  GO-2022-1060: Gogs vulnerable to Cross-site Scripting in gogs.io/gogs

  GO-2023-1596: Gogs OS Command Injection vulnerability in gogs.io/gogs

  GO-2023-1971: Gogs and Gitea SSRF Vulnerability in code.gitea.io/gitea

  GO-2023-1972: Gogs XSS Vulnerability in gogs.io/gogs

Changes in this version

+ const FOLLOWERS

+ func Action(ctx *middleware.Context)

+ func Followers(ctx *middleware.Context)

+ func Following(ctx *middleware.Context)

+ func GetUserByName(ctx *middleware.Context, name string) *models.User

+ func GetUserByParams(ctx *middleware.Context) *models.User

Dec 18, 2015 GO-2022-0369 +19 more

  GO-2022-0369: Gogs vulnerable to improper PAM authorization handling in gogs.io/gogs

  GO-2022-0377: SSRF in repository migration in gogs.io/gogs

  GO-2022-0471: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0473: Cross site scripting via cookies in gogs in gogs.io/gogs

  GO-2022-0483: Cross-site Scripting vulnerability in repository issue list in Gogs in gogs.io/gogs

  GO-2022-0554: Unrestricted Upload of File with Dangerous Type in Gogs in gogs.io/gogs

  GO-2022-0556: OS Command Injection in file editor in Gogs in gogs.io/gogs

  GO-2022-0562: Path Traversal in Git HTTP endpoints in Gogs in gogs.io/gogs

  GO-2022-0566: SSRF in repository migration in gogs.io/gogs

  GO-2022-0570: Path Traversal in file editor on Windows in Gogs in gogs.io/gogs

  GO-2022-0583: Server-Side Request Forgery in gogs webhook in gogs.io/gogs

  GO-2022-0597: Cross-site Scripting in Gogs in gogs.io/gogs

  GO-2022-0749: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0788: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0797: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0822: Open Redirect in gogs.io/gogs

  GO-2022-1060: Gogs vulnerable to Cross-site Scripting in gogs.io/gogs

  GO-2023-1596: Gogs OS Command Injection vulnerability in gogs.io/gogs

  GO-2023-1971: Gogs and Gitea SSRF Vulnerability in code.gitea.io/gitea

  GO-2023-1972: Gogs XSS Vulnerability in gogs.io/gogs

Dec 13, 2015 GO-2022-0369 +19 more

  GO-2022-0369: Gogs vulnerable to improper PAM authorization handling in gogs.io/gogs

  GO-2022-0377: SSRF in repository migration in gogs.io/gogs

  GO-2022-0471: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0473: Cross site scripting via cookies in gogs in gogs.io/gogs

  GO-2022-0483: Cross-site Scripting vulnerability in repository issue list in Gogs in gogs.io/gogs

  GO-2022-0554: Unrestricted Upload of File with Dangerous Type in Gogs in gogs.io/gogs

  GO-2022-0556: OS Command Injection in file editor in Gogs in gogs.io/gogs

  GO-2022-0562: Path Traversal in Git HTTP endpoints in Gogs in gogs.io/gogs

  GO-2022-0566: SSRF in repository migration in gogs.io/gogs

  GO-2022-0570: Path Traversal in file editor on Windows in Gogs in gogs.io/gogs

  GO-2022-0583: Server-Side Request Forgery in gogs webhook in gogs.io/gogs

  GO-2022-0597: Cross-site Scripting in Gogs in gogs.io/gogs

  GO-2022-0749: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0788: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0797: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0822: Open Redirect in gogs.io/gogs

  GO-2022-1060: Gogs vulnerable to Cross-site Scripting in gogs.io/gogs

  GO-2023-1596: Gogs OS Command Injection vulnerability in gogs.io/gogs

  GO-2023-1971: Gogs and Gitea SSRF Vulnerability in code.gitea.io/gitea

  GO-2023-1972: Gogs XSS Vulnerability in gogs.io/gogs

Dec 6, 2015 GO-2022-0369 +19 more

  GO-2022-0369: Gogs vulnerable to improper PAM authorization handling in gogs.io/gogs

  GO-2022-0377: SSRF in repository migration in gogs.io/gogs

  GO-2022-0471: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0473: Cross site scripting via cookies in gogs in gogs.io/gogs

  GO-2022-0483: Cross-site Scripting vulnerability in repository issue list in Gogs in gogs.io/gogs

  GO-2022-0554: Unrestricted Upload of File with Dangerous Type in Gogs in gogs.io/gogs

  GO-2022-0556: OS Command Injection in file editor in Gogs in gogs.io/gogs

  GO-2022-0562: Path Traversal in Git HTTP endpoints in Gogs in gogs.io/gogs

  GO-2022-0566: SSRF in repository migration in gogs.io/gogs

  GO-2022-0570: Path Traversal in file editor on Windows in Gogs in gogs.io/gogs

  GO-2022-0583: Server-Side Request Forgery in gogs webhook in gogs.io/gogs

  GO-2022-0597: Cross-site Scripting in Gogs in gogs.io/gogs

  GO-2022-0749: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0788: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0797: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0822: Open Redirect in gogs.io/gogs

  GO-2022-1060: Gogs vulnerable to Cross-site Scripting in gogs.io/gogs

  GO-2023-1596: Gogs OS Command Injection vulnerability in gogs.io/gogs

  GO-2023-1971: Gogs and Gitea SSRF Vulnerability in code.gitea.io/gitea

  GO-2023-1972: Gogs XSS Vulnerability in gogs.io/gogs

Nov 25, 2015 GO-2022-0369 +19 more

  GO-2022-0369: Gogs vulnerable to improper PAM authorization handling in gogs.io/gogs

  GO-2022-0377: SSRF in repository migration in gogs.io/gogs

  GO-2022-0471: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0473: Cross site scripting via cookies in gogs in gogs.io/gogs

  GO-2022-0483: Cross-site Scripting vulnerability in repository issue list in Gogs in gogs.io/gogs

  GO-2022-0554: Unrestricted Upload of File with Dangerous Type in Gogs in gogs.io/gogs

  GO-2022-0556: OS Command Injection in file editor in Gogs in gogs.io/gogs

  GO-2022-0562: Path Traversal in Git HTTP endpoints in Gogs in gogs.io/gogs

  GO-2022-0566: SSRF in repository migration in gogs.io/gogs

  GO-2022-0570: Path Traversal in file editor on Windows in Gogs in gogs.io/gogs

  GO-2022-0583: Server-Side Request Forgery in gogs webhook in gogs.io/gogs

  GO-2022-0597: Cross-site Scripting in Gogs in gogs.io/gogs

  GO-2022-0749: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0788: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0797: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0822: Open Redirect in gogs.io/gogs

  GO-2022-1060: Gogs vulnerable to Cross-site Scripting in gogs.io/gogs

  GO-2023-1596: Gogs OS Command Injection vulnerability in gogs.io/gogs

  GO-2023-1971: Gogs and Gitea SSRF Vulnerability in code.gitea.io/gitea

  GO-2023-1972: Gogs XSS Vulnerability in gogs.io/gogs

Changes in this version

+ const ORG_HOME

Nov 21, 2015 GO-2022-0369 +19 more

  GO-2022-0369: Gogs vulnerable to improper PAM authorization handling in gogs.io/gogs

  GO-2022-0377: SSRF in repository migration in gogs.io/gogs

  GO-2022-0471: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0473: Cross site scripting via cookies in gogs in gogs.io/gogs

  GO-2022-0483: Cross-site Scripting vulnerability in repository issue list in Gogs in gogs.io/gogs

  GO-2022-0554: Unrestricted Upload of File with Dangerous Type in Gogs in gogs.io/gogs

  GO-2022-0556: OS Command Injection in file editor in Gogs in gogs.io/gogs

  GO-2022-0562: Path Traversal in Git HTTP endpoints in Gogs in gogs.io/gogs

  GO-2022-0566: SSRF in repository migration in gogs.io/gogs

  GO-2022-0570: Path Traversal in file editor on Windows in Gogs in gogs.io/gogs

  GO-2022-0583: Server-Side Request Forgery in gogs webhook in gogs.io/gogs

  GO-2022-0597: Cross-site Scripting in Gogs in gogs.io/gogs

  GO-2022-0749: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0788: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0797: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0822: Open Redirect in gogs.io/gogs

  GO-2022-1060: Gogs vulnerable to Cross-site Scripting in gogs.io/gogs

  GO-2023-1596: Gogs OS Command Injection vulnerability in gogs.io/gogs

  GO-2023-1971: Gogs and Gitea SSRF Vulnerability in code.gitea.io/gitea

  GO-2023-1972: Gogs XSS Vulnerability in gogs.io/gogs

Nov 12, 2015 GO-2022-0369 +19 more

  GO-2022-0369: Gogs vulnerable to improper PAM authorization handling in gogs.io/gogs

  GO-2022-0377: SSRF in repository migration in gogs.io/gogs

  GO-2022-0471: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0473: Cross site scripting via cookies in gogs in gogs.io/gogs

  GO-2022-0483: Cross-site Scripting vulnerability in repository issue list in Gogs in gogs.io/gogs

  GO-2022-0554: Unrestricted Upload of File with Dangerous Type in Gogs in gogs.io/gogs

  GO-2022-0556: OS Command Injection in file editor in Gogs in gogs.io/gogs

  GO-2022-0562: Path Traversal in Git HTTP endpoints in Gogs in gogs.io/gogs

  GO-2022-0566: SSRF in repository migration in gogs.io/gogs

  GO-2022-0570: Path Traversal in file editor on Windows in Gogs in gogs.io/gogs

  GO-2022-0583: Server-Side Request Forgery in gogs webhook in gogs.io/gogs

  GO-2022-0597: Cross-site Scripting in Gogs in gogs.io/gogs

  GO-2022-0749: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0788: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0797: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0822: Open Redirect in gogs.io/gogs

  GO-2022-1060: Gogs vulnerable to Cross-site Scripting in gogs.io/gogs

  GO-2023-1596: Gogs OS Command Injection vulnerability in gogs.io/gogs

  GO-2023-1971: Gogs and Gitea SSRF Vulnerability in code.gitea.io/gitea

  GO-2023-1972: Gogs XSS Vulnerability in gogs.io/gogs

Nov 8, 2015 GO-2022-0369 +19 more

  GO-2022-0369: Gogs vulnerable to improper PAM authorization handling in gogs.io/gogs

  GO-2022-0377: SSRF in repository migration in gogs.io/gogs

  GO-2022-0471: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0473: Cross site scripting via cookies in gogs in gogs.io/gogs

  GO-2022-0483: Cross-site Scripting vulnerability in repository issue list in Gogs in gogs.io/gogs

  GO-2022-0554: Unrestricted Upload of File with Dangerous Type in Gogs in gogs.io/gogs

  GO-2022-0556: OS Command Injection in file editor in Gogs in gogs.io/gogs

  GO-2022-0562: Path Traversal in Git HTTP endpoints in Gogs in gogs.io/gogs

  GO-2022-0566: SSRF in repository migration in gogs.io/gogs

  GO-2022-0570: Path Traversal in file editor on Windows in Gogs in gogs.io/gogs

  GO-2022-0583: Server-Side Request Forgery in gogs webhook in gogs.io/gogs

  GO-2022-0597: Cross-site Scripting in Gogs in gogs.io/gogs

  GO-2022-0749: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0788: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0797: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0822: Open Redirect in gogs.io/gogs

  GO-2022-1060: Gogs vulnerable to Cross-site Scripting in gogs.io/gogs

  GO-2023-1596: Gogs OS Command Injection vulnerability in gogs.io/gogs

  GO-2023-1971: Gogs and Gitea SSRF Vulnerability in code.gitea.io/gitea

  GO-2023-1972: Gogs XSS Vulnerability in gogs.io/gogs

Sep 26, 2015 GO-2022-0369 +19 more

  GO-2022-0369: Gogs vulnerable to improper PAM authorization handling in gogs.io/gogs

  GO-2022-0377: SSRF in repository migration in gogs.io/gogs

  GO-2022-0471: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0473: Cross site scripting via cookies in gogs in gogs.io/gogs

  GO-2022-0483: Cross-site Scripting vulnerability in repository issue list in Gogs in gogs.io/gogs

  GO-2022-0554: Unrestricted Upload of File with Dangerous Type in Gogs in gogs.io/gogs

  GO-2022-0556: OS Command Injection in file editor in Gogs in gogs.io/gogs

  GO-2022-0562: Path Traversal in Git HTTP endpoints in Gogs in gogs.io/gogs

  GO-2022-0566: SSRF in repository migration in gogs.io/gogs

  GO-2022-0570: Path Traversal in file editor on Windows in Gogs in gogs.io/gogs

  GO-2022-0583: Server-Side Request Forgery in gogs webhook in gogs.io/gogs

  GO-2022-0597: Cross-site Scripting in Gogs in gogs.io/gogs

  GO-2022-0749: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0788: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0797: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0822: Open Redirect in gogs.io/gogs

  GO-2022-1060: Gogs vulnerable to Cross-site Scripting in gogs.io/gogs

  GO-2023-1596: Gogs OS Command Injection vulnerability in gogs.io/gogs

  GO-2023-1971: Gogs and Gitea SSRF Vulnerability in code.gitea.io/gitea

  GO-2023-1972: Gogs XSS Vulnerability in gogs.io/gogs

Changes in this version

+ func DeleteEmail(ctx *middleware.Context)

+ func UpdateAvatarSetting(ctx *middleware.Context, form auth.UploadAvatarForm, ctxUser *models.User) error

Sep 5, 2015 GO-2022-0369 +19 more

  GO-2022-0369: Gogs vulnerable to improper PAM authorization handling in gogs.io/gogs

  GO-2022-0377: SSRF in repository migration in gogs.io/gogs

  GO-2022-0471: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0473: Cross site scripting via cookies in gogs in gogs.io/gogs

  GO-2022-0483: Cross-site Scripting vulnerability in repository issue list in Gogs in gogs.io/gogs

  GO-2022-0554: Unrestricted Upload of File with Dangerous Type in Gogs in gogs.io/gogs

  GO-2022-0556: OS Command Injection in file editor in Gogs in gogs.io/gogs

  GO-2022-0562: Path Traversal in Git HTTP endpoints in Gogs in gogs.io/gogs

  GO-2022-0566: SSRF in repository migration in gogs.io/gogs

  GO-2022-0570: Path Traversal in file editor on Windows in Gogs in gogs.io/gogs

  GO-2022-0583: Server-Side Request Forgery in gogs webhook in gogs.io/gogs

  GO-2022-0597: Cross-site Scripting in Gogs in gogs.io/gogs

  GO-2022-0749: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0788: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0797: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0822: Open Redirect in gogs.io/gogs

  GO-2022-1060: Gogs vulnerable to Cross-site Scripting in gogs.io/gogs

  GO-2023-1596: Gogs OS Command Injection vulnerability in gogs.io/gogs

  GO-2023-1971: Gogs and Gitea SSRF Vulnerability in code.gitea.io/gitea

  GO-2023-1972: Gogs XSS Vulnerability in gogs.io/gogs

Changes in this version

+ func DeleteSSHKey(ctx *middleware.Context)

+ func SettingsDeleteApplication(ctx *middleware.Context)

Aug 16, 2015 GO-2022-0369 +19 more

  GO-2022-0369: Gogs vulnerable to improper PAM authorization handling in gogs.io/gogs

  GO-2022-0377: SSRF in repository migration in gogs.io/gogs

  GO-2022-0471: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0473: Cross site scripting via cookies in gogs in gogs.io/gogs

  GO-2022-0483: Cross-site Scripting vulnerability in repository issue list in Gogs in gogs.io/gogs

  GO-2022-0554: Unrestricted Upload of File with Dangerous Type in Gogs in gogs.io/gogs

  GO-2022-0556: OS Command Injection in file editor in Gogs in gogs.io/gogs

  GO-2022-0562: Path Traversal in Git HTTP endpoints in Gogs in gogs.io/gogs

  GO-2022-0566: SSRF in repository migration in gogs.io/gogs

  GO-2022-0570: Path Traversal in file editor on Windows in Gogs in gogs.io/gogs

  GO-2022-0583: Server-Side Request Forgery in gogs webhook in gogs.io/gogs

  GO-2022-0597: Cross-site Scripting in Gogs in gogs.io/gogs

  GO-2022-0749: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0788: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0797: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0822: Open Redirect in gogs.io/gogs

  GO-2022-1060: Gogs vulnerable to Cross-site Scripting in gogs.io/gogs

  GO-2023-1596: Gogs OS Command Injection vulnerability in gogs.io/gogs

  GO-2023-1971: Gogs and Gitea SSRF Vulnerability in code.gitea.io/gitea

  GO-2023-1972: Gogs XSS Vulnerability in gogs.io/gogs

Aug 2, 2015 GO-2022-0369 +18 more

  GO-2022-0369: Gogs vulnerable to improper PAM authorization handling in gogs.io/gogs

  GO-2022-0377: SSRF in repository migration in gogs.io/gogs

  GO-2022-0471: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0473: Cross site scripting via cookies in gogs in gogs.io/gogs

  GO-2022-0483: Cross-site Scripting vulnerability in repository issue list in Gogs in gogs.io/gogs

  GO-2022-0554: Unrestricted Upload of File with Dangerous Type in Gogs in gogs.io/gogs

  GO-2022-0556: OS Command Injection in file editor in Gogs in gogs.io/gogs

  GO-2022-0562: Path Traversal in Git HTTP endpoints in Gogs in gogs.io/gogs

  GO-2022-0566: SSRF in repository migration in gogs.io/gogs

  GO-2022-0570: Path Traversal in file editor on Windows in Gogs in gogs.io/gogs

  GO-2022-0583: Server-Side Request Forgery in gogs webhook in gogs.io/gogs

  GO-2022-0597: Cross-site Scripting in Gogs in gogs.io/gogs

  GO-2022-0749: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0788: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0797: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0822: Open Redirect in gogs.io/gogs

  GO-2023-1596: Gogs OS Command Injection vulnerability in gogs.io/gogs

  GO-2023-1971: Gogs and Gitea SSRF Vulnerability in code.gitea.io/gitea

  GO-2023-1972: Gogs XSS Vulnerability in gogs.io/gogs

Mar 26, 2015 GO-2022-0369 +18 more

  GO-2022-0369: Gogs vulnerable to improper PAM authorization handling in gogs.io/gogs

  GO-2022-0377: SSRF in repository migration in gogs.io/gogs

  GO-2022-0471: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0473: Cross site scripting via cookies in gogs in gogs.io/gogs

  GO-2022-0483: Cross-site Scripting vulnerability in repository issue list in Gogs in gogs.io/gogs

  GO-2022-0554: Unrestricted Upload of File with Dangerous Type in Gogs in gogs.io/gogs

  GO-2022-0556: OS Command Injection in file editor in Gogs in gogs.io/gogs

  GO-2022-0562: Path Traversal in Git HTTP endpoints in Gogs in gogs.io/gogs

  GO-2022-0566: SSRF in repository migration in gogs.io/gogs

  GO-2022-0570: Path Traversal in file editor on Windows in Gogs in gogs.io/gogs

  GO-2022-0583: Server-Side Request Forgery in gogs webhook in gogs.io/gogs

  GO-2022-0597: Cross-site Scripting in Gogs in gogs.io/gogs

  GO-2022-0749: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0788: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0797: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0822: Open Redirect in gogs.io/gogs

  GO-2023-1596: Gogs OS Command Injection vulnerability in gogs.io/gogs

  GO-2023-1971: Gogs and Gitea SSRF Vulnerability in code.gitea.io/gitea

  GO-2023-1972: Gogs XSS Vulnerability in gogs.io/gogs

Mar 19, 2015 GO-2022-0369 +18 more

  GO-2022-0369: Gogs vulnerable to improper PAM authorization handling in gogs.io/gogs

  GO-2022-0377: SSRF in repository migration in gogs.io/gogs

  GO-2022-0471: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0473: Cross site scripting via cookies in gogs in gogs.io/gogs

  GO-2022-0483: Cross-site Scripting vulnerability in repository issue list in Gogs in gogs.io/gogs

  GO-2022-0554: Unrestricted Upload of File with Dangerous Type in Gogs in gogs.io/gogs

  GO-2022-0556: OS Command Injection in file editor in Gogs in gogs.io/gogs

  GO-2022-0562: Path Traversal in Git HTTP endpoints in Gogs in gogs.io/gogs

  GO-2022-0566: SSRF in repository migration in gogs.io/gogs

  GO-2022-0570: Path Traversal in file editor on Windows in Gogs in gogs.io/gogs

  GO-2022-0583: Server-Side Request Forgery in gogs webhook in gogs.io/gogs

  GO-2022-0597: Cross-site Scripting in Gogs in gogs.io/gogs

  GO-2022-0749: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0788: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0797: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0822: Open Redirect in gogs.io/gogs

  GO-2023-1596: Gogs OS Command Injection vulnerability in gogs.io/gogs

  GO-2023-1971: Gogs and Gitea SSRF Vulnerability in code.gitea.io/gitea

  GO-2023-1972: Gogs XSS Vulnerability in gogs.io/gogs

Feb 13, 2015 GO-2022-0369 +18 more

  GO-2022-0369: Gogs vulnerable to improper PAM authorization handling in gogs.io/gogs

  GO-2022-0377: SSRF in repository migration in gogs.io/gogs

  GO-2022-0471: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0473: Cross site scripting via cookies in gogs in gogs.io/gogs

  GO-2022-0483: Cross-site Scripting vulnerability in repository issue list in Gogs in gogs.io/gogs

  GO-2022-0554: Unrestricted Upload of File with Dangerous Type in Gogs in gogs.io/gogs

  GO-2022-0556: OS Command Injection in file editor in Gogs in gogs.io/gogs

  GO-2022-0562: Path Traversal in Git HTTP endpoints in Gogs in gogs.io/gogs

  GO-2022-0566: SSRF in repository migration in gogs.io/gogs

  GO-2022-0570: Path Traversal in file editor on Windows in Gogs in gogs.io/gogs

  GO-2022-0583: Server-Side Request Forgery in gogs webhook in gogs.io/gogs

  GO-2022-0597: Cross-site Scripting in Gogs in gogs.io/gogs

  GO-2022-0749: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0788: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0797: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0822: Open Redirect in gogs.io/gogs

  GO-2023-1596: Gogs OS Command Injection vulnerability in gogs.io/gogs

  GO-2023-1971: Gogs and Gitea SSRF Vulnerability in code.gitea.io/gitea

  GO-2023-1972: Gogs XSS Vulnerability in gogs.io/gogs

Jan 5, 2015 GO-2022-0369 +18 more

  GO-2022-0369: Gogs vulnerable to improper PAM authorization handling in gogs.io/gogs

  GO-2022-0377: SSRF in repository migration in gogs.io/gogs

  GO-2022-0471: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0473: Cross site scripting via cookies in gogs in gogs.io/gogs

  GO-2022-0483: Cross-site Scripting vulnerability in repository issue list in Gogs in gogs.io/gogs

  GO-2022-0554: Unrestricted Upload of File with Dangerous Type in Gogs in gogs.io/gogs

  GO-2022-0556: OS Command Injection in file editor in Gogs in gogs.io/gogs

  GO-2022-0562: Path Traversal in Git HTTP endpoints in Gogs in gogs.io/gogs

  GO-2022-0566: SSRF in repository migration in gogs.io/gogs

  GO-2022-0570: Path Traversal in file editor on Windows in Gogs in gogs.io/gogs

  GO-2022-0583: Server-Side Request Forgery in gogs webhook in gogs.io/gogs

  GO-2022-0597: Cross-site Scripting in Gogs in gogs.io/gogs

  GO-2022-0749: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0788: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0797: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0822: Open Redirect in gogs.io/gogs

  GO-2023-1596: Gogs OS Command Injection vulnerability in gogs.io/gogs

  GO-2023-1971: Gogs and Gitea SSRF Vulnerability in code.gitea.io/gitea

  GO-2023-1972: Gogs XSS Vulnerability in gogs.io/gogs

Changes in this version

+ const SETTINGS_EMAILS

+ func ActivateEmail(ctx *middleware.Context)

+ func SettingsEmailPost(ctx *middleware.Context, form auth.AddEmailForm)

+ func SettingsEmails(ctx *middleware.Context)

Dec 14, 2014 GO-2022-0369 +18 more

  GO-2022-0369: Gogs vulnerable to improper PAM authorization handling in gogs.io/gogs

  GO-2022-0377: SSRF in repository migration in gogs.io/gogs

  GO-2022-0471: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0473: Cross site scripting via cookies in gogs in gogs.io/gogs

  GO-2022-0483: Cross-site Scripting vulnerability in repository issue list in Gogs in gogs.io/gogs

  GO-2022-0554: Unrestricted Upload of File with Dangerous Type in Gogs in gogs.io/gogs

  GO-2022-0556: OS Command Injection in file editor in Gogs in gogs.io/gogs

  GO-2022-0562: Path Traversal in Git HTTP endpoints in Gogs in gogs.io/gogs

  GO-2022-0566: SSRF in repository migration in gogs.io/gogs

  GO-2022-0570: Path Traversal in file editor on Windows in Gogs in gogs.io/gogs

  GO-2022-0583: Server-Side Request Forgery in gogs webhook in gogs.io/gogs

  GO-2022-0597: Cross-site Scripting in Gogs in gogs.io/gogs

  GO-2022-0749: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0788: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0797: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0822: Open Redirect in gogs.io/gogs

  GO-2023-1596: Gogs OS Command Injection vulnerability in gogs.io/gogs

  GO-2023-1971: Gogs and Gitea SSRF Vulnerability in code.gitea.io/gitea

  GO-2023-1972: Gogs XSS Vulnerability in gogs.io/gogs

Changes in this version

+ func SettingsAvatar(ctx *middleware.Context, form auth.UploadAvatarForm)

+ func ShowSSHKeys(ctx *middleware.Context, uid int64)

Nov 19, 2014 GO-2022-0369 +18 more

  GO-2022-0369: Gogs vulnerable to improper PAM authorization handling in gogs.io/gogs

  GO-2022-0377: SSRF in repository migration in gogs.io/gogs

  GO-2022-0471: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0473: Cross site scripting via cookies in gogs in gogs.io/gogs

  GO-2022-0483: Cross-site Scripting vulnerability in repository issue list in Gogs in gogs.io/gogs

  GO-2022-0554: Unrestricted Upload of File with Dangerous Type in Gogs in gogs.io/gogs

  GO-2022-0556: OS Command Injection in file editor in Gogs in gogs.io/gogs

  GO-2022-0562: Path Traversal in Git HTTP endpoints in Gogs in gogs.io/gogs

  GO-2022-0566: SSRF in repository migration in gogs.io/gogs

  GO-2022-0570: Path Traversal in file editor on Windows in Gogs in gogs.io/gogs

  GO-2022-0583: Server-Side Request Forgery in gogs webhook in gogs.io/gogs

  GO-2022-0597: Cross-site Scripting in Gogs in gogs.io/gogs

  GO-2022-0749: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0788: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0797: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0822: Open Redirect in gogs.io/gogs

  GO-2023-1596: Gogs OS Command Injection vulnerability in gogs.io/gogs

  GO-2023-1971: Gogs and Gitea SSRF Vulnerability in code.gitea.io/gitea

  GO-2023-1972: Gogs XSS Vulnerability in gogs.io/gogs

Changes in this version

+ const SETTINGS_APPLICATIONS

+ func SettingsApplications(ctx *middleware.Context)

+ func SettingsApplicationsPost(ctx *middleware.Context, form auth.NewAccessTokenForm)

Oct 10, 2014 GO-2022-0369 +20 more

  GO-2022-0369: Gogs vulnerable to improper PAM authorization handling in gogs.io/gogs

  GO-2022-0377: SSRF in repository migration in gogs.io/gogs

  GO-2022-0471: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0473: Cross site scripting via cookies in gogs in gogs.io/gogs

  GO-2022-0483: Cross-site Scripting vulnerability in repository issue list in Gogs in gogs.io/gogs

  GO-2022-0554: Unrestricted Upload of File with Dangerous Type in Gogs in gogs.io/gogs

  GO-2022-0556: OS Command Injection in file editor in Gogs in gogs.io/gogs

  GO-2022-0562: Path Traversal in Git HTTP endpoints in Gogs in gogs.io/gogs

  GO-2022-0566: SSRF in repository migration in gogs.io/gogs

  GO-2022-0570: Path Traversal in file editor on Windows in Gogs in gogs.io/gogs

  GO-2022-0583: Server-Side Request Forgery in gogs webhook in gogs.io/gogs

  GO-2022-0597: Cross-site Scripting in Gogs in gogs.io/gogs

  GO-2022-0642: Cross-site Scripting in Gogs in gogs.io/gogs

  GO-2022-0749: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0788: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0797: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0822: Open Redirect in gogs.io/gogs

  GO-2022-0831: SQL Injection in Gogs in gogs.io/gogs

  GO-2023-1596: Gogs OS Command Injection vulnerability in gogs.io/gogs

  GO-2023-1971: Gogs and Gitea SSRF Vulnerability in code.gitea.io/gitea

  GO-2023-1972: Gogs XSS Vulnerability in gogs.io/gogs

Sep 18, 2014 GO-2022-0369 +20 more

  GO-2022-0369: Gogs vulnerable to improper PAM authorization handling in gogs.io/gogs

  GO-2022-0377: SSRF in repository migration in gogs.io/gogs

  GO-2022-0471: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0473: Cross site scripting via cookies in gogs in gogs.io/gogs

  GO-2022-0483: Cross-site Scripting vulnerability in repository issue list in Gogs in gogs.io/gogs

  GO-2022-0554: Unrestricted Upload of File with Dangerous Type in Gogs in gogs.io/gogs

  GO-2022-0556: OS Command Injection in file editor in Gogs in gogs.io/gogs

  GO-2022-0562: Path Traversal in Git HTTP endpoints in Gogs in gogs.io/gogs

  GO-2022-0566: SSRF in repository migration in gogs.io/gogs

  GO-2022-0570: Path Traversal in file editor on Windows in Gogs in gogs.io/gogs

  GO-2022-0583: Server-Side Request Forgery in gogs webhook in gogs.io/gogs

  GO-2022-0597: Cross-site Scripting in Gogs in gogs.io/gogs

  GO-2022-0642: Cross-site Scripting in Gogs in gogs.io/gogs

  GO-2022-0749: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0788: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0797: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0822: Open Redirect in gogs.io/gogs

  GO-2022-0831: SQL Injection in Gogs in gogs.io/gogs

  GO-2023-1596: Gogs OS Command Injection vulnerability in gogs.io/gogs

  GO-2023-1971: Gogs and Gitea SSRF Vulnerability in code.gitea.io/gitea

  GO-2023-1972: Gogs XSS Vulnerability in gogs.io/gogs

Sep 14, 2014 GO-2022-0369 +20 more

  GO-2022-0369: Gogs vulnerable to improper PAM authorization handling in gogs.io/gogs

  GO-2022-0377: SSRF in repository migration in gogs.io/gogs

  GO-2022-0471: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0473: Cross site scripting via cookies in gogs in gogs.io/gogs

  GO-2022-0483: Cross-site Scripting vulnerability in repository issue list in Gogs in gogs.io/gogs

  GO-2022-0554: Unrestricted Upload of File with Dangerous Type in Gogs in gogs.io/gogs

  GO-2022-0556: OS Command Injection in file editor in Gogs in gogs.io/gogs

  GO-2022-0562: Path Traversal in Git HTTP endpoints in Gogs in gogs.io/gogs

  GO-2022-0566: SSRF in repository migration in gogs.io/gogs

  GO-2022-0570: Path Traversal in file editor on Windows in Gogs in gogs.io/gogs

  GO-2022-0583: Server-Side Request Forgery in gogs webhook in gogs.io/gogs

  GO-2022-0597: Cross-site Scripting in Gogs in gogs.io/gogs

  GO-2022-0642: Cross-site Scripting in Gogs in gogs.io/gogs

  GO-2022-0749: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0788: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0797: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0822: Open Redirect in gogs.io/gogs

  GO-2022-0831: SQL Injection in Gogs in gogs.io/gogs

  GO-2023-1596: Gogs OS Command Injection vulnerability in gogs.io/gogs

  GO-2023-1971: Gogs and Gitea SSRF Vulnerability in code.gitea.io/gitea

  GO-2023-1972: Gogs XSS Vulnerability in gogs.io/gogs

Changes in this version

+ const ACTIVATE

+ const DASHBOARD

+ const FORGOT_PASSWORD

+ const ISSUES

+ const NOTIFICATION

+ const PROFILE

+ const PULLS

+ const RESET_PASSWORD

+ const SECURITY

+ const SETTINGS_DELETE

+ const SETTINGS_PASSWORD

+ const SETTINGS_PROFILE

+ const SETTINGS_SOCIAL

+ const SETTINGS_SSH_KEYS

+ const SIGNIN

+ const SIGNUP

+ const STARS

+ func Settings(ctx *middleware.Context)

+ func SettingsDelete(ctx *middleware.Context)

+ func SettingsPassword(ctx *middleware.Context)

+ func SettingsPasswordPost(ctx *middleware.Context, form auth.ChangePasswordForm)

+ func SettingsPost(ctx *middleware.Context, form auth.UpdateProfileForm)

+ func SettingsSSHKeys(ctx *middleware.Context)

+ func SettingsSSHKeysPost(ctx *middleware.Context, form auth.AddSSHKeyForm)

+ func SettingsSocial(ctx *middleware.Context)

Jun 6, 2014 GO-2022-0369 +20 more

  GO-2022-0369: Gogs vulnerable to improper PAM authorization handling in gogs.io/gogs

  GO-2022-0377: SSRF in repository migration in gogs.io/gogs

  GO-2022-0471: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0473: Cross site scripting via cookies in gogs in gogs.io/gogs

  GO-2022-0483: Cross-site Scripting vulnerability in repository issue list in Gogs in gogs.io/gogs

  GO-2022-0554: Unrestricted Upload of File with Dangerous Type in Gogs in gogs.io/gogs

  GO-2022-0556: OS Command Injection in file editor in Gogs in gogs.io/gogs

  GO-2022-0562: Path Traversal in Git HTTP endpoints in Gogs in gogs.io/gogs

  GO-2022-0566: SSRF in repository migration in gogs.io/gogs

  GO-2022-0570: Path Traversal in file editor on Windows in Gogs in gogs.io/gogs

  GO-2022-0583: Server-Side Request Forgery in gogs webhook in gogs.io/gogs

  GO-2022-0597: Cross-site Scripting in Gogs in gogs.io/gogs

  GO-2022-0642: Cross-site Scripting in Gogs in gogs.io/gogs

  GO-2022-0749: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0788: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0797: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0822: Open Redirect in gogs.io/gogs

  GO-2022-0831: SQL Injection in Gogs in gogs.io/gogs

  GO-2023-1596: Gogs OS Command Injection vulnerability in gogs.io/gogs

  GO-2023-1971: Gogs and Gitea SSRF Vulnerability in code.gitea.io/gitea

  GO-2023-1972: Gogs XSS Vulnerability in gogs.io/gogs

Jun 1, 2014 GO-2022-0369 +20 more

  GO-2022-0369: Gogs vulnerable to improper PAM authorization handling in gogs.io/gogs

  GO-2022-0377: SSRF in repository migration in gogs.io/gogs

  GO-2022-0471: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0473: Cross site scripting via cookies in gogs in gogs.io/gogs

  GO-2022-0483: Cross-site Scripting vulnerability in repository issue list in Gogs in gogs.io/gogs

  GO-2022-0554: Unrestricted Upload of File with Dangerous Type in Gogs in gogs.io/gogs

  GO-2022-0556: OS Command Injection in file editor in Gogs in gogs.io/gogs

  GO-2022-0562: Path Traversal in Git HTTP endpoints in Gogs in gogs.io/gogs

  GO-2022-0566: SSRF in repository migration in gogs.io/gogs

  GO-2022-0570: Path Traversal in file editor on Windows in Gogs in gogs.io/gogs

  GO-2022-0583: Server-Side Request Forgery in gogs webhook in gogs.io/gogs

  GO-2022-0597: Cross-site Scripting in Gogs in gogs.io/gogs

  GO-2022-0642: Cross-site Scripting in Gogs in gogs.io/gogs

  GO-2022-0749: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0788: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0797: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0822: Open Redirect in gogs.io/gogs

  GO-2022-0831: SQL Injection in Gogs in gogs.io/gogs

  GO-2023-1596: Gogs OS Command Injection vulnerability in gogs.io/gogs

  GO-2023-1971: Gogs and Gitea SSRF Vulnerability in code.gitea.io/gitea

  GO-2023-1972: Gogs XSS Vulnerability in gogs.io/gogs

May 31, 2014 GO-2022-0369 +20 more

  GO-2022-0369: Gogs vulnerable to improper PAM authorization handling in gogs.io/gogs

  GO-2022-0377: SSRF in repository migration in gogs.io/gogs

  GO-2022-0471: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0473: Cross site scripting via cookies in gogs in gogs.io/gogs

  GO-2022-0483: Cross-site Scripting vulnerability in repository issue list in Gogs in gogs.io/gogs

  GO-2022-0554: Unrestricted Upload of File with Dangerous Type in Gogs in gogs.io/gogs

  GO-2022-0556: OS Command Injection in file editor in Gogs in gogs.io/gogs

  GO-2022-0562: Path Traversal in Git HTTP endpoints in Gogs in gogs.io/gogs

  GO-2022-0566: SSRF in repository migration in gogs.io/gogs

  GO-2022-0570: Path Traversal in file editor on Windows in Gogs in gogs.io/gogs

  GO-2022-0583: Server-Side Request Forgery in gogs webhook in gogs.io/gogs

  GO-2022-0597: Cross-site Scripting in Gogs in gogs.io/gogs

  GO-2022-0642: Cross-site Scripting in Gogs in gogs.io/gogs

  GO-2022-0749: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0788: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0797: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0822: Open Redirect in gogs.io/gogs

  GO-2022-0831: SQL Injection in Gogs in gogs.io/gogs

  GO-2023-1596: Gogs OS Command Injection vulnerability in gogs.io/gogs

  GO-2023-1971: Gogs and Gitea SSRF Vulnerability in code.gitea.io/gitea

  GO-2023-1972: Gogs XSS Vulnerability in gogs.io/gogs

Apr 29, 2014 GO-2022-0369 +20 more

  GO-2022-0369: Gogs vulnerable to improper PAM authorization handling in gogs.io/gogs

  GO-2022-0377: SSRF in repository migration in gogs.io/gogs

  GO-2022-0471: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0473: Cross site scripting via cookies in gogs in gogs.io/gogs

  GO-2022-0483: Cross-site Scripting vulnerability in repository issue list in Gogs in gogs.io/gogs

  GO-2022-0554: Unrestricted Upload of File with Dangerous Type in Gogs in gogs.io/gogs

  GO-2022-0556: OS Command Injection in file editor in Gogs in gogs.io/gogs

  GO-2022-0562: Path Traversal in Git HTTP endpoints in Gogs in gogs.io/gogs

  GO-2022-0566: SSRF in repository migration in gogs.io/gogs

  GO-2022-0570: Path Traversal in file editor on Windows in Gogs in gogs.io/gogs

  GO-2022-0583: Server-Side Request Forgery in gogs webhook in gogs.io/gogs

  GO-2022-0597: Cross-site Scripting in Gogs in gogs.io/gogs

  GO-2022-0642: Cross-site Scripting in Gogs in gogs.io/gogs

  GO-2022-0749: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0788: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0797: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0822: Open Redirect in gogs.io/gogs

  GO-2022-0831: SQL Injection in Gogs in gogs.io/gogs

  GO-2023-1596: Gogs OS Command Injection vulnerability in gogs.io/gogs

  GO-2023-1971: Gogs and Gitea SSRF Vulnerability in code.gitea.io/gitea

  GO-2023-1972: Gogs XSS Vulnerability in gogs.io/gogs

Apr 21, 2014 GO-2022-0369 +18 more

  GO-2022-0369: Gogs vulnerable to improper PAM authorization handling in gogs.io/gogs

  GO-2022-0377: SSRF in repository migration in gogs.io/gogs

  GO-2022-0471: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0473: Cross site scripting via cookies in gogs in gogs.io/gogs

  GO-2022-0483: Cross-site Scripting vulnerability in repository issue list in Gogs in gogs.io/gogs

  GO-2022-0554: Unrestricted Upload of File with Dangerous Type in Gogs in gogs.io/gogs

  GO-2022-0556: OS Command Injection in file editor in Gogs in gogs.io/gogs

  GO-2022-0562: Path Traversal in Git HTTP endpoints in Gogs in gogs.io/gogs

  GO-2022-0566: SSRF in repository migration in gogs.io/gogs

  GO-2022-0570: Path Traversal in file editor on Windows in Gogs in gogs.io/gogs

  GO-2022-0583: Server-Side Request Forgery in gogs webhook in gogs.io/gogs

  GO-2022-0597: Cross-site Scripting in Gogs in gogs.io/gogs

  GO-2022-0749: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0788: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0797: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0822: Open Redirect in gogs.io/gogs

  GO-2023-1596: Gogs OS Command Injection vulnerability in gogs.io/gogs

  GO-2023-1971: Gogs and Gitea SSRF Vulnerability in code.gitea.io/gitea

  GO-2023-1972: Gogs XSS Vulnerability in gogs.io/gogs

Changes in this version

+ func DeletePost(ctx *middleware.Context)

+ func Email2User(ctx *middleware.Context)

+ func ForgotPasswd(ctx *middleware.Context)

+ func ForgotPasswdPost(ctx *middleware.Context)

+ func ResetPasswd(ctx *middleware.Context)

+ func ResetPasswdPost(ctx *middleware.Context)

+ func SettingPasswordPost(ctx *middleware.Context, form auth.UpdatePasswdForm)

+ func SettingPost(ctx *middleware.Context, form auth.UpdateProfileForm)

+ func SettingSocial(ctx *middleware.Context)

+ func SignInPost(ctx *middleware.Context, form auth.LogInForm)

+ func SignUpPost(ctx *middleware.Context, form auth.RegisterForm)

+ func SocialSignIn(ctx *middleware.Context, params martini.Params)

Mar 31, 2014 GO-2022-0369 +18 more

  GO-2022-0369: Gogs vulnerable to improper PAM authorization handling in gogs.io/gogs

  GO-2022-0377: SSRF in repository migration in gogs.io/gogs

  GO-2022-0471: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0473: Cross site scripting via cookies in gogs in gogs.io/gogs

  GO-2022-0483: Cross-site Scripting vulnerability in repository issue list in Gogs in gogs.io/gogs

  GO-2022-0554: Unrestricted Upload of File with Dangerous Type in Gogs in gogs.io/gogs

  GO-2022-0556: OS Command Injection in file editor in Gogs in gogs.io/gogs

  GO-2022-0562: Path Traversal in Git HTTP endpoints in Gogs in gogs.io/gogs

  GO-2022-0566: SSRF in repository migration in gogs.io/gogs

  GO-2022-0570: Path Traversal in file editor on Windows in Gogs in gogs.io/gogs

  GO-2022-0583: Server-Side Request Forgery in gogs webhook in gogs.io/gogs

  GO-2022-0597: Cross-site Scripting in Gogs in gogs.io/gogs

  GO-2022-0749: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0788: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0797: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0822: Open Redirect in gogs.io/gogs

  GO-2023-1596: Gogs OS Command Injection vulnerability in gogs.io/gogs

  GO-2023-1971: Gogs and Gitea SSRF Vulnerability in code.gitea.io/gitea

  GO-2023-1972: Gogs XSS Vulnerability in gogs.io/gogs

Changes in this version

+ const TPL_FEED

+ func Activate(ctx *middleware.Context)

+ func Dashboard(ctx *middleware.Context)

+ func Delete(ctx *middleware.Context)

+ func Feeds(ctx *middleware.Context, form auth.FeedsForm)

+ func Issues(ctx *middleware.Context)

+ func Profile(ctx *middleware.Context, params martini.Params)

+ func Pulls(ctx *middleware.Context)

+ func Setting(ctx *middleware.Context, form auth.UpdateProfileForm)

+ func SettingNotification(ctx *middleware.Context)

+ func SettingPassword(ctx *middleware.Context, form auth.UpdatePasswdForm)

+ func SettingSSHKeys(ctx *middleware.Context, form auth.AddSSHKeyForm)

+ func SettingSecurity(ctx *middleware.Context)

+ func SignIn(ctx *middleware.Context, form auth.LogInForm)

+ func SignOut(ctx *middleware.Context)

+ func SignUp(ctx *middleware.Context, form auth.RegisterForm)

+ func Stars(ctx *middleware.Context)