Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 13 Oct 2026 04:24:26 +0000 EUVD-2026-12136 https://cve.radiocsirt.org/vuln/euvd-2026-12136 EUVD-2026-12136 https://cve.radiocsirt.org/vuln/euvd-2026-12136 fkie_cve-2022-1986 https://cve.radiocsirt.org/vuln/fkie_cve-2022-1986 <p>OS Command Injection in GitHub repository gogs/gogs prior to 0.12.9.</p> <p>OS Command Injection in GitHub repository gogs/gogs prior to 0.12.9.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2022-1986 GHSA-67mx-jc2f-jgjm — OS Command Injection in file editor in Gogs https://cve.radiocsirt.org/vuln/ghsa-67mx-jc2f-jgjm <p><strong>Affected:</strong> Go: gogs.io/gogs</p> <p>### Impact</p> <p>The malicious user is able to update a crafted `config` file into repository&#39;s `.git` directory in combination with crafted file deletion to gain SSH access to the server. All installations with [repository upload enabled (default)](https://github.com/gogs/gogs/blob/f36eeedbf89328ee70cc3a2e239f6314f9021f58/conf/app.ini#L127-L129) are affected.</p> <p>### Patches</p> <p>File deletions are prohibited to repository&#39;s `.git` directory. Users should upgrade to 0.12.9 or the latest 0.13.0+dev.</p> <p>### Workarounds</p> <p>N/A</p> <p>### References</p> <p>https://huntr.dev/bounties/776e8f29-ff5e-4501-bb9f-0bd335007930/</p> <p>### For more information</p> <p>If you have any questions or comments about this advisory, please post on #7000.</p> <p><strong>Affected:</strong> Go: gogs.io/gogs</p> <p>### Impact</p> <p>The malicious user is able to update a crafted `config` file into repository&#39;s `.git` directory in combination with crafted file deletion to gain SSH access to the server. All installations with [repository upload enabled (default)](https://github.com/gogs/gogs/blob/f36eeedbf89328ee70cc3a2e239f6314f9021f58/conf/app.ini#L127-L129) are affected.</p> <p>### Patches</p> <p>File deletions are prohibited to repository&#39;s `.git` directory. Users should upgrade to 0.12.9 or the latest 0.13.0+dev.</p> <p>### Workarounds</p> <p>N/A</p> <p>### References</p> <p>https://huntr.dev/bounties/776e8f29-ff5e-4501-bb9f-0bd335007930/</p> <p>### For more information</p> <p>If you have any questions or comments about this advisory, please post on #7000.</p> https://cve.radiocsirt.org/vuln/ghsa-67mx-jc2f-jgjm gsd-2022-1986 https://cve.radiocsirt.org/vuln/gsd-2022-1986 gsd-2022-1986 https://cve.radiocsirt.org/vuln/gsd-2022-1986