Gogs vulnerable to a bypass of CVE-2024-55947

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2025-8110 · ADVISORY
• gogs/gogs#8078 · WEB
• gogs/gogs#8082 · WEB
• gogs/gogs commit 553707f · WEB
• GitHub Advisory GHSA-mq8m-42gh-wq7r · ADVISORY
• gogs/gogs · PACKAGE
• cisa.gov/known-exploited-vulnerabilities-catalog · WEB
• wiz.io/blog/wiz-research-gogs-cve-2025-8110-rce-exploit · WEB
• openwall.com/lists/oss-security/2025/12/11/3 · WEB
• openwall.com/lists/oss-security/2025/12/11/4 · WEB
• openwall.com/lists/oss-security/2026/01/17/4 · WEB
• openwall.com/lists/oss-security/2026/01/18/1 · WEB

gogs.io/gogs のその他の脆弱性

• GO-2026-5193Gogs: XSS in .ipynb files renderer due to outdated notebookjs in gogs.io/gogs
• CVE-2026-52816中 5.4Gogs is an open source self-hosted Git service. Prior to 0.14.3, the Jupyter Notebook (ipynb) sanitizer endpoint at POST /-/api/sanitize_ipy…
• CVE-2026-52815中 5.5Gogs is an open source self-hosted Git service. Prior to 0.14.3, Gogs has an unauthenticated information disclosure vulnerability. The GET /…
• CVE-2026-52814中 5.5Gogs is an open source self-hosted Git service. Prior to 0.14.3, the Gogs built-in Go SSH server is vulnerable to an unauthenticated, asymme…
• CVE-2026-52813緊急 10.0Gogs is an open source self-hosted Git service. Prior to 0.14.3, organization names containing path traversal sequences (../) are accepted b…