https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 12 Oct 2026 23:09:59 +0000 https://cve.radiocsirt.org/vuln/cleanstart-2024-bz87721 <p><strong>Affected:</strong> CleanStart: gogs</p> <p>Security vulnerability affects the gogs package. Missing Authorization in GitHub repository gogs/gogs prior to 0.</p> <p><strong>Affected:</strong> CleanStart: gogs</p> <p>Security vulnerability affects the gogs package. Missing Authorization in GitHub repository gogs/gogs prior to 0.</p> https://cve.radiocsirt.org/vuln/cleanstart-2024-bz87721 https://cve.radiocsirt.org/vuln/euvd-2026-11286 EUVD-2026-11286 https://cve.radiocsirt.org/vuln/euvd-2026-11286 https://cve.radiocsirt.org/vuln/fkie_cve-2022-0871 <p>Missing Authorization in GitHub repository gogs/gogs prior to 0.12.5.</p> <p>Missing Authorization in GitHub repository gogs/gogs prior to 0.12.5.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2022-0871 https://cve.radiocsirt.org/vuln/ghsa-gw5h-h6hj-f56g <p><strong>Affected:</strong> Go: gogs.io/gogs</p> <p>### Impact</p> <p>Expired PAM accounts and accounts with expired passwords are continued to be seen as valid. Installations use PAM as authentication sources are affected.</p> <p>### Patches</p> <p>Expired PAM accounts and accounts with expired passwords are no longer being seen as valid. Users should upgrade to 0.12.5 or the latest 0.13.0+dev.</p> <p>### Workarounds</p> <p>In addition to marking PAM accounts as expired, also disable/lock them. Running `usermod -L &lt;username&gt;` will add an exclamation mark to the password hash and would result in wrong passwords responses when trying to login.</p> <p>### References</p> <p>https://huntr.dev/bounties/ea82cfc9-b55c-41fe-ae58-0d0e0bd7ab62/</p> <p>### For more information</p> <p>If you have any questions or comments about this advisory, please post on https://github.com/gogs/gogs/issues/6810.</p> <p><strong>Affected:</strong> Go: gogs.io/gogs</p> <p>### Impact</p> <p>Expired PAM accounts and accounts with expired passwords are continued to be seen as valid. Installations use PAM as authentication sources are affected.</p> <p>### Patches</p> <p>Expired PAM accounts and accounts with expired passwords are no longer being seen as valid. Users should upgrade to 0.12.5 or the latest 0.13.0+dev.</p> <p>### Workarounds</p> <p>In addition to marking PAM accounts as expired, also disable/lock them. Running `usermod -L &lt;username&gt;` will add an exclamation mark to the password hash and would result in wrong passwords responses when trying to login.</p> <p>### References</p> <p>https://huntr.dev/bounties/ea82cfc9-b55c-41fe-ae58-0d0e0bd7ab62/</p> <p>### For more information</p> <p>If you have any questions or comments about this advisory, please post on https://github.com/gogs/gogs/issues/6810.</p> https://cve.radiocsirt.org/vuln/ghsa-gw5h-h6hj-f56g https://cve.radiocsirt.org/vuln/gsd-2022-0871 gsd-2022-0871 https://cve.radiocsirt.org/vuln/gsd-2022-0871