Known vulnerabilities in gogs - page 3

Vendor: gogs.io
Software: gogs
Software CPE: cpe:2.3:a:gogs.io:gogs:*:*:*:*:*:*:*:*
Total vulnerabilities: 71
Public exploits: 7
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting gogs gogs is affected by 71 known vulnerabilities: 12 high, 30 medium, 29 low Critical High Medium Low

Vulnerabilities (71)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU122473 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-23633
CWE-22 Low
No
No
0.13.4, 0.14.0 09.02.2026 SB2026020959
#VU122469 - Missing Authorization
CVE-2026-23632
CWE-862 Medium
No
No
0.13.4, 0.14.0 09.02.2026 SB2026020959
#VU122467 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-24135
CWE-22 Medium
No
No
0.13.4, 0.14.0 09.02.2026 SB2026020959
#VU122464 - Missing Authorization
CVE-2026-22592
CWE-862 Medium
Available
No
0.13.4, 0.14.0 09.02.2026 SB2026020959
#VU122463 - Improper Access Control
CVE-2025-65852
CWE-284 Medium
Available
No
0.13.4, 0.14.0 09.02.2026 SB2026020959
#VU119869 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2025-8110
CWE-22 High
Available
Exploited
0.13.4 11.12.2025 SB2025121160
#VU119868 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2024-55947
CWE-22 Medium
No
No
0.13.1 11.12.2025 SB2025121159
#VU128078 - Improper input validation
CVE-2024-54148
CWE-20 Medium
No
No
0.13.1 23.12.2024 SB2025121159
#VU128077 - Improper input validation
CVE-2024-39930
CWE-20 Medium
No
No
0.13.1 23.12.2024 SB2025121159
#VU128076 - Improper input validation
CVE-2024-39931
CWE-20 Medium
No
No
0.13.1 23.12.2024 SB2025121159
#VU128075 - Improper input validation
CVE-2024-39932
CWE-20 Medium
No
No
0.13.1 23.12.2024 SB2025121159
#VU128074 - Improper input validation
CVE-2024-39933
CWE-20 Low
No
No
0.13.1 23.12.2024 SB2025121159
#VU128080 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2022-2024
CWE-78 Medium
No
No
0.12.11 25.02.2023 SB2022101409
#VU68308 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-32174
CWE-79 Low
Available
No
0.12.11 14.10.2022 SB2022101409
SB2023112104
#VU64135 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-31038
CWE-79 Low
No
No
0.12.9 09.06.2022 SB2022060914
#VU128081 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2022-1993
CWE-22 Low
No
No
0.12.9 08.06.2022 SB2022060914
#VU128082 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2022-1992
CWE-22 Medium
No
No
0.12.9 08.06.2022 SB2022060914
#VU128083 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2022-1986
CWE-78 Medium
No
No
0.12.9 08.06.2022 SB2022060914
#VU128084 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2021-32546
CWE-78 Medium
No
No
0.12.8 31.05.2022 SB2022053153
#VU128085 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2022-1884
CWE-78 Medium
No
No
0.12.8 31.05.2022 SB2022053153


Showing elements 41 - 60 out of 71