Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 08 Oct 2026 14:34:33 +0000 bdu:2024-05766 https://cve.radiocsirt.org/vuln/bdu:2024-05766 bdu:2024-05766 https://cve.radiocsirt.org/vuln/bdu:2024-05766 EUVD-2026-6261 https://cve.radiocsirt.org/vuln/euvd-2026-6261 EUVD-2026-6261 https://cve.radiocsirt.org/vuln/euvd-2026-6261 fkie_cve-2024-39931 https://cve.radiocsirt.org/vuln/fkie_cve-2024-39931 <p>Gogs through 0.13.0 allows deletion of internal files.</p> <p>Gogs through 0.13.0 allows deletion of internal files.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-39931 GHSA-ccqv-43vm-4f3w — Gogs allows deletion of internal files https://cve.radiocsirt.org/vuln/ghsa-ccqv-43vm-4f3w <p><strong>Affected:</strong> Go: gogs.io/gogs</p> <p>### Impact</p> <p>Unprivileged user accounts can execute arbitrary commands on the Gogs instance with the privileges of the account specified by `RUN_USER` in the configuration. It allows attackers to access and alter any users&#39; code hosted on the same instance.</p> <p>### Patches</p> <p>Deletion of `.git` files has been prohibited (https://github.com/gogs/gogs/pull/7870). Users should upgrade to 0.13.1 or the latest 0.14.0+dev.</p> <p>### Workarounds</p> <p>No viable workaround available, please only grant access to trusted users to your Gogs instance on affected versions.</p> <p>### References</p> <p>https://www.cve.org/CVERecord?id=CVE-2024-39931</p> <p><strong>Affected:</strong> Go: gogs.io/gogs</p> <p>### Impact</p> <p>Unprivileged user accounts can execute arbitrary commands on the Gogs instance with the privileges of the account specified by `RUN_USER` in the configuration. It allows attackers to access and alter any users&#39; code hosted on the same instance.</p> <p>### Patches</p> <p>Deletion of `.git` files has been prohibited (https://github.com/gogs/gogs/pull/7870). Users should upgrade to 0.13.1 or the latest 0.14.0+dev.</p> <p>### Workarounds</p> <p>No viable workaround available, please only grant access to trusted users to your Gogs instance on affected versions.</p> <p>### References</p> <p>https://www.cve.org/CVERecord?id=CVE-2024-39931</p> https://cve.radiocsirt.org/vuln/ghsa-ccqv-43vm-4f3w