high
Gogs: Bypassing security controls and denial of service possible
CERT-Bund (BSI) reports one vulnerability in Gogs with severity high. The stated impact is bypassing security controls and denial of service. The full description, affected versions and recommended action are available from CERT-Bund (BSI).
- Attack vector
- over the network
- Access needed
- yes, an account is needed
- Security update
- not yet available
What this means for you
A protective measure can be bypassed: login, permission checks or filters do not work as intended. Check whether the system is reachable from the internet; if so, the update takes precedence.
Original source
Insights
More articles
Weekly situation, week 45: 61 advisories, 5 critical
Between 1 Nov and 8 Nov 2026 our sources recorded 61 advisories: 5 critical, 56 high.
Weekly situation, week 44: 60 advisories, 2 critical
Between 25 Oct and 1 Nov 2026 our sources recorded 60 advisories: 2 critical, 58 high.
Weekly situation, week 43: 86 advisories, 11 critical
Between 18 Oct and 25 Oct 2026 our sources recorded 86 advisories: 11 critical, 75 high.
Contact
Reputation takes years. Destruction takes seconds.
Talk to us before somebody else does. The first conversation is free and we reply the same business day.