gogs.io/gogs vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Get a demo

Browse by ecosystem

npmPyPIMavenGoRubyGemsCargoNuGetComposerpubSwiftGitHub Actions
CVE-IDSeverityPackage summary
CVE-2026-52816Mediumgogs.io/gogs: Gogs's Unauthenticated Jupyter Notebook (ipynb) Sanitizer allows arbitrary data: URIs leading to XSSCVE-2026-52815Mediumgogs.io/gogs: Gogs Vulnerable to Unauthenticated Organization Teams Information Disclosure via APICVE-2026-52814Mediumgogs.io/gogs: Gogs has Unauthenticated Asymmetric Denial of Service (DoS) via SSH Handshake Stall (File Descriptor Exhaustion)CVE-2026-52813Criticalgogs.io/gogs: Gogs has Path Traversal in organization name that results in RCE through Git hooksCVE-2026-52812Highgogs.io/gogs: Gogs: LFS dedupe path leaks private repo content across tenantsCVE-2026-52811Criticalgogs.io/gogs: Gogs: UploadRepoFiles writes outside repo working tree via committed parent symCVE-2026-52810Highgogs.io/gogs: Gogs allows users to write to readonly repositories using receive-pack + service=git-upload-pack confusionCVE-2026-52809Mediumgogs.io/gogs: Gogs's password-reset tokens use account-activation lifetime, ignoring RESET_PASSWORD_CODE_LIVESCVE-2026-52808Highgogs.io/gogs: Gogs's write-level collaborators can mutate admin-only repository settings via APICVE-2026-52807Highgogs.io/gogs: Gogs has DOM-based XSS via Milestone Name on New Issue PageCVE-2026-52806Criticalgogs.io/gogs: Gogs vulnerable to RCE via git rebase --exec argument injection in pull request mergeCVE-2026-52805Highgogs.io/gogs: Gogs has a Migration Redirect Bypass that Leads to Internal Repository TheftCVE-2026-52804Mediumgogs.io/gogs: Gogs Vulnerable to Privilege Escalation via Collaboration Access Mode ValidationCVE-2026-52802Mediumgogs.io/gogs: Gogs has an Open Redirect via redirect_toCVE-2026-52801Highgogs.io/gogs: Gogs has the ability to import local repositories via Mirror SettingsCVE-2026-52800Highgogs.io/gogs: Gogs Vulnerable to CSRF Leading to Organization Owner TakeoverCVE-2026-52799Highgogs.io/gogs: Gogs Missing Authorization in Attachment DownloadCVE-2026-52798Highgogs.io/gogs: Gogs has Stored XSS in `.ipynb` PreviewCVE-2026-52796Lowgogs.io/gogs: Gogs has DoS in rendering issue index patternCVE-2026-47267Mediumgogs.io/gogs: Gogs has SSRF in webhook deliveriesCVE-2026-25119Highgogs.io/gogs: Gogs has an Authentication Bypass via Unvalidated Reverse Proxy HeadersCVE-2025-64719Mediumgogs.io/gogs: Gogs has a Denial of Service in repository/wiki file listing web pagesGHSA-6VXV-WG6J-5QWPHighgogs.io/gogs: Gogs: XSS in .ipynb files renderer due to outdated notebookjsCVE-2026-52797Highgogs.io/gogs: Gogs: Overwriting critical files results in a denial of serviceCVE-2026-26276Highgogs.io/gogs: Gogs: DOM-based XSS via milestone selection

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo
Get a personalized demo