CNNVD-202602-985 Information
Feb 06, 2026
cve
CNNVD ID
CNNVD-202602-985
Related CVE
- CNNVD Published: 2026-02-06
Description (Chinese)
Gogs（Go Git Service）是Gogs团队的一个基于Go语言的自助Git托管服务，它支持创建、迁移公开/私有仓库，添加、删除仓库协作者等。 Gogs 0.13.3及之前版本存在路径遍历漏洞，该漏洞源于Git钩子编辑功能存在路径遍历，可能导致任意文件读写。
Description (English)
Gogs (Go Git Service), a Gogs team-based self-help Git hosting service based on Go language, supports the creation, relocation, addition, removal of warehouse collaborators, etc. The Gogs 0.13.3 and previous versions have a loophole in the path, which stems from the existence of the Git hook editing function, which may lead to any document being read and written.
Hazard Level
High
Vulnerability Type
路径遍历
Affected Vendor
Gogs
Published
2026-02-06
Last Modified
2026-02-24
References
https://github.com/gogs/gogs/security/advisories/GHSA-mrph-w4hh-gx3g
Patch
https://github.com/gogs/gogs/releases
Share on: