GHSA-phm4-wf3h-pc3r
GitHub Security Advisory
Unpatched Remote Code Execution in Gogs
✓ GitHub Reviewed
HIGH
Has CVE
Advisory Details
Gogs <=0.13.0 is vulnerable to Directory Traversal via the editFilePost function of internal/route/repo/editor.go.
Affected Packages
Go
gogs.io/gogs
Affected versions:
0
(last affected: 0.13.0)
Related CVEs
Key Information
7.5
/10
Dataset
Last updated: September 14, 2025 6:31 AM
Data from GitHub Advisory Database. This information is provided for research and educational purposes.