| Package | Affected versions | Patched versions |
|---|---|---|
| gogs.io/gogs | < 0.12.0 | 0.12.0 |
| gogs | = 0.11.91 |
In Gogs 0.11.91, MakeEmailPrimary in models/user_mail.go lacks a "not the owner of the email" check.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free