Skip to content
CVE PROGRAM SOURCE RECORD6.5 Medium

CVE-2026-23633

Gogs has arbitrary file read/write via path traversal in Git hook editing

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
GitHub_M

Description

Gogs is an open source self-hosted Git service. In version 0.13.3 and prior, there is an arbitrary file read/write via path traversal in Git hook editing. This issue has been patched in versions 0.13.4 and 0.14.0+dev.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

gogs gogs

  • < 0.14.0+devaffected
  • < 0.13.4affected

References