VDB

CISA-2026-23633

CISA-2026-23633 PUBLISHED CVSS 6.5 MEDIUM

Reported by GitHub_M · Published February 6, 2026

Gogs is an open source self-hosted Git service. In version 0.13.3 and prior, there is an arbitrary file read/write via path traversal in Git hook editing. This issue has been patched in versions 0.13.4 and 0.14.0+dev.

Risk Scores

CVSS 3.1
6.5
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N

Affected Products

VendorProductVersions
gogsgogs< 0.14.0+dev, < 0.13.4
gogsgogs< 0.14.0+dev, < 0.13.4, < 0.14.0+dev

Timeline

  • Feb 6, 2026 CVE Published
  • Feb 6, 2026 CVE Updated

References

Open in Interactive Console →
$ Console Community · 100/wk Open console ›