base

Mar 14, 2017 GO-2022-0369 +22 more

  GO-2022-0369: Gogs vulnerable to improper PAM authorization handling in gogs.io/gogs

  GO-2022-0377: SSRF in repository migration in gogs.io/gogs

  GO-2022-0471: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0473: Cross site scripting via cookies in gogs in gogs.io/gogs

  GO-2022-0483: Cross-site Scripting vulnerability in repository issue list in Gogs in gogs.io/gogs

  GO-2022-0554: Unrestricted Upload of File with Dangerous Type in Gogs in gogs.io/gogs

  GO-2022-0556: OS Command Injection in file editor in Gogs in gogs.io/gogs

  GO-2022-0562: Path Traversal in Git HTTP endpoints in Gogs in gogs.io/gogs

  GO-2022-0566: SSRF in repository migration in gogs.io/gogs

  GO-2022-0570: Path Traversal in file editor on Windows in Gogs in gogs.io/gogs

  GO-2022-0583: Server-Side Request Forgery in gogs webhook in gogs.io/gogs

  GO-2022-0597: Cross-site Scripting in Gogs in gogs.io/gogs

  GO-2022-0749: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0788: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0797: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0822: Open Redirect in gogs.io/gogs

  GO-2022-1060: Gogs vulnerable to Cross-site Scripting in gogs.io/gogs

  GO-2023-1596: Gogs OS Command Injection vulnerability in gogs.io/gogs

  GO-2023-1971: Gogs and Gitea SSRF Vulnerability in code.gitea.io/gitea

  GO-2023-1972: Gogs XSS Vulnerability in gogs.io/gogs

  GO-2024-3275: Unpatched Remote Code Execution in Gogs in gogs.io/gogs

  GO-2024-3355: Remote Command Execution in file editing in gogs in gogs.io/gogs

  GO-2024-3356: Path Traversal in file update API in gogs in gogs.io/gogs

Mar 7, 2017 GO-2022-0369 +22 more

  GO-2022-0369: Gogs vulnerable to improper PAM authorization handling in gogs.io/gogs

  GO-2022-0377: SSRF in repository migration in gogs.io/gogs

  GO-2022-0471: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0473: Cross site scripting via cookies in gogs in gogs.io/gogs

  GO-2022-0483: Cross-site Scripting vulnerability in repository issue list in Gogs in gogs.io/gogs

  GO-2022-0554: Unrestricted Upload of File with Dangerous Type in Gogs in gogs.io/gogs

  GO-2022-0556: OS Command Injection in file editor in Gogs in gogs.io/gogs

  GO-2022-0562: Path Traversal in Git HTTP endpoints in Gogs in gogs.io/gogs

  GO-2022-0566: SSRF in repository migration in gogs.io/gogs

  GO-2022-0570: Path Traversal in file editor on Windows in Gogs in gogs.io/gogs

  GO-2022-0583: Server-Side Request Forgery in gogs webhook in gogs.io/gogs

  GO-2022-0597: Cross-site Scripting in Gogs in gogs.io/gogs

  GO-2022-0749: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0788: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0797: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0822: Open Redirect in gogs.io/gogs

  GO-2022-1060: Gogs vulnerable to Cross-site Scripting in gogs.io/gogs

  GO-2023-1596: Gogs OS Command Injection vulnerability in gogs.io/gogs

  GO-2023-1971: Gogs and Gitea SSRF Vulnerability in code.gitea.io/gitea

  GO-2023-1972: Gogs XSS Vulnerability in gogs.io/gogs

  GO-2024-3275: Unpatched Remote Code Execution in Gogs in gogs.io/gogs

  GO-2024-3355: Remote Command Execution in file editing in gogs in gogs.io/gogs

  GO-2024-3356: Path Traversal in file update API in gogs in gogs.io/gogs

Feb 28, 2017 GO-2022-0369 +22 more

  GO-2022-0369: Gogs vulnerable to improper PAM authorization handling in gogs.io/gogs

  GO-2022-0377: SSRF in repository migration in gogs.io/gogs

  GO-2022-0471: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0473: Cross site scripting via cookies in gogs in gogs.io/gogs

  GO-2022-0483: Cross-site Scripting vulnerability in repository issue list in Gogs in gogs.io/gogs

  GO-2022-0554: Unrestricted Upload of File with Dangerous Type in Gogs in gogs.io/gogs

  GO-2022-0556: OS Command Injection in file editor in Gogs in gogs.io/gogs

  GO-2022-0562: Path Traversal in Git HTTP endpoints in Gogs in gogs.io/gogs

  GO-2022-0566: SSRF in repository migration in gogs.io/gogs

  GO-2022-0570: Path Traversal in file editor on Windows in Gogs in gogs.io/gogs

  GO-2022-0583: Server-Side Request Forgery in gogs webhook in gogs.io/gogs

  GO-2022-0597: Cross-site Scripting in Gogs in gogs.io/gogs

  GO-2022-0749: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0788: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0797: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0822: Open Redirect in gogs.io/gogs

  GO-2022-1060: Gogs vulnerable to Cross-site Scripting in gogs.io/gogs

  GO-2023-1596: Gogs OS Command Injection vulnerability in gogs.io/gogs

  GO-2023-1971: Gogs and Gitea SSRF Vulnerability in code.gitea.io/gitea

  GO-2023-1972: Gogs XSS Vulnerability in gogs.io/gogs

  GO-2024-3275: Unpatched Remote Code Execution in Gogs in gogs.io/gogs

  GO-2024-3355: Remote Command Execution in file editing in gogs in gogs.io/gogs

  GO-2024-3356: Path Traversal in file update API in gogs in gogs.io/gogs

Feb 11, 2017 GO-2022-0369 +22 more

  GO-2022-0369: Gogs vulnerable to improper PAM authorization handling in gogs.io/gogs

  GO-2022-0377: SSRF in repository migration in gogs.io/gogs

  GO-2022-0471: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0473: Cross site scripting via cookies in gogs in gogs.io/gogs

  GO-2022-0483: Cross-site Scripting vulnerability in repository issue list in Gogs in gogs.io/gogs

  GO-2022-0554: Unrestricted Upload of File with Dangerous Type in Gogs in gogs.io/gogs

  GO-2022-0556: OS Command Injection in file editor in Gogs in gogs.io/gogs

  GO-2022-0562: Path Traversal in Git HTTP endpoints in Gogs in gogs.io/gogs

  GO-2022-0566: SSRF in repository migration in gogs.io/gogs

  GO-2022-0570: Path Traversal in file editor on Windows in Gogs in gogs.io/gogs

  GO-2022-0583: Server-Side Request Forgery in gogs webhook in gogs.io/gogs

  GO-2022-0597: Cross-site Scripting in Gogs in gogs.io/gogs

  GO-2022-0749: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0788: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0797: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0822: Open Redirect in gogs.io/gogs

  GO-2022-1060: Gogs vulnerable to Cross-site Scripting in gogs.io/gogs

  GO-2023-1596: Gogs OS Command Injection vulnerability in gogs.io/gogs

  GO-2023-1971: Gogs and Gitea SSRF Vulnerability in code.gitea.io/gitea

  GO-2023-1972: Gogs XSS Vulnerability in gogs.io/gogs

  GO-2024-3275: Unpatched Remote Code Execution in Gogs in gogs.io/gogs

  GO-2024-3355: Remote Command Execution in file editing in gogs in gogs.io/gogs

  GO-2024-3356: Path Traversal in file update API in gogs in gogs.io/gogs

Jan 31, 2017 GO-2022-0369 +22 more

  GO-2022-0369: Gogs vulnerable to improper PAM authorization handling in gogs.io/gogs

  GO-2022-0377: SSRF in repository migration in gogs.io/gogs

  GO-2022-0471: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0473: Cross site scripting via cookies in gogs in gogs.io/gogs

  GO-2022-0483: Cross-site Scripting vulnerability in repository issue list in Gogs in gogs.io/gogs

  GO-2022-0554: Unrestricted Upload of File with Dangerous Type in Gogs in gogs.io/gogs

  GO-2022-0556: OS Command Injection in file editor in Gogs in gogs.io/gogs

  GO-2022-0562: Path Traversal in Git HTTP endpoints in Gogs in gogs.io/gogs

  GO-2022-0566: SSRF in repository migration in gogs.io/gogs

  GO-2022-0570: Path Traversal in file editor on Windows in Gogs in gogs.io/gogs

  GO-2022-0583: Server-Side Request Forgery in gogs webhook in gogs.io/gogs

  GO-2022-0597: Cross-site Scripting in Gogs in gogs.io/gogs

  GO-2022-0749: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0788: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0797: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0822: Open Redirect in gogs.io/gogs

  GO-2022-1060: Gogs vulnerable to Cross-site Scripting in gogs.io/gogs

  GO-2023-1596: Gogs OS Command Injection vulnerability in gogs.io/gogs

  GO-2023-1971: Gogs and Gitea SSRF Vulnerability in code.gitea.io/gitea

  GO-2023-1972: Gogs XSS Vulnerability in gogs.io/gogs

  GO-2024-3275: Unpatched Remote Code Execution in Gogs in gogs.io/gogs

  GO-2024-3355: Remote Command Execution in file editing in gogs in gogs.io/gogs

  GO-2024-3356: Path Traversal in file update API in gogs in gogs.io/gogs

Dec 24, 2016 GO-2022-0369 +22 more

  GO-2022-0369: Gogs vulnerable to improper PAM authorization handling in gogs.io/gogs

  GO-2022-0377: SSRF in repository migration in gogs.io/gogs

  GO-2022-0471: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0473: Cross site scripting via cookies in gogs in gogs.io/gogs

  GO-2022-0483: Cross-site Scripting vulnerability in repository issue list in Gogs in gogs.io/gogs

  GO-2022-0554: Unrestricted Upload of File with Dangerous Type in Gogs in gogs.io/gogs

  GO-2022-0556: OS Command Injection in file editor in Gogs in gogs.io/gogs

  GO-2022-0562: Path Traversal in Git HTTP endpoints in Gogs in gogs.io/gogs

  GO-2022-0566: SSRF in repository migration in gogs.io/gogs

  GO-2022-0570: Path Traversal in file editor on Windows in Gogs in gogs.io/gogs

  GO-2022-0583: Server-Side Request Forgery in gogs webhook in gogs.io/gogs

  GO-2022-0597: Cross-site Scripting in Gogs in gogs.io/gogs

  GO-2022-0749: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0788: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0797: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0822: Open Redirect in gogs.io/gogs

  GO-2022-1060: Gogs vulnerable to Cross-site Scripting in gogs.io/gogs

  GO-2023-1596: Gogs OS Command Injection vulnerability in gogs.io/gogs

  GO-2023-1971: Gogs and Gitea SSRF Vulnerability in code.gitea.io/gitea

  GO-2023-1972: Gogs XSS Vulnerability in gogs.io/gogs

  GO-2024-3275: Unpatched Remote Code Execution in Gogs in gogs.io/gogs

  GO-2024-3355: Remote Command Execution in file editing in gogs in gogs.io/gogs

  GO-2024-3356: Path Traversal in file update API in gogs in gogs.io/gogs

Changes in this version

+ func IsVideoFile(data []byte) bool

Sep 1, 2016 GO-2022-0369 +22 more

  GO-2022-0369: Gogs vulnerable to improper PAM authorization handling in gogs.io/gogs

  GO-2022-0377: SSRF in repository migration in gogs.io/gogs

  GO-2022-0471: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0473: Cross site scripting via cookies in gogs in gogs.io/gogs

  GO-2022-0483: Cross-site Scripting vulnerability in repository issue list in Gogs in gogs.io/gogs

  GO-2022-0554: Unrestricted Upload of File with Dangerous Type in Gogs in gogs.io/gogs

  GO-2022-0556: OS Command Injection in file editor in Gogs in gogs.io/gogs

  GO-2022-0562: Path Traversal in Git HTTP endpoints in Gogs in gogs.io/gogs

  GO-2022-0566: SSRF in repository migration in gogs.io/gogs

  GO-2022-0570: Path Traversal in file editor on Windows in Gogs in gogs.io/gogs

  GO-2022-0583: Server-Side Request Forgery in gogs webhook in gogs.io/gogs

  GO-2022-0597: Cross-site Scripting in Gogs in gogs.io/gogs

  GO-2022-0749: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0788: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0797: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0822: Open Redirect in gogs.io/gogs

  GO-2022-1060: Gogs vulnerable to Cross-site Scripting in gogs.io/gogs

  GO-2023-1596: Gogs OS Command Injection vulnerability in gogs.io/gogs

  GO-2023-1971: Gogs and Gitea SSRF Vulnerability in code.gitea.io/gitea

  GO-2023-1972: Gogs XSS Vulnerability in gogs.io/gogs

  GO-2024-3275: Unpatched Remote Code Execution in Gogs in gogs.io/gogs

  GO-2024-3355: Remote Command Execution in file editing in gogs in gogs.io/gogs

  GO-2024-3356: Path Traversal in file update API in gogs in gogs.io/gogs

Aug 10, 2016 GO-2022-0369 +22 more

  GO-2022-0369: Gogs vulnerable to improper PAM authorization handling in gogs.io/gogs

  GO-2022-0377: SSRF in repository migration in gogs.io/gogs

  GO-2022-0471: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0473: Cross site scripting via cookies in gogs in gogs.io/gogs

  GO-2022-0483: Cross-site Scripting vulnerability in repository issue list in Gogs in gogs.io/gogs

  GO-2022-0554: Unrestricted Upload of File with Dangerous Type in Gogs in gogs.io/gogs

  GO-2022-0556: OS Command Injection in file editor in Gogs in gogs.io/gogs

  GO-2022-0562: Path Traversal in Git HTTP endpoints in Gogs in gogs.io/gogs

  GO-2022-0566: SSRF in repository migration in gogs.io/gogs

  GO-2022-0570: Path Traversal in file editor on Windows in Gogs in gogs.io/gogs

  GO-2022-0583: Server-Side Request Forgery in gogs webhook in gogs.io/gogs

  GO-2022-0597: Cross-site Scripting in Gogs in gogs.io/gogs

  GO-2022-0749: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0788: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0797: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0822: Open Redirect in gogs.io/gogs

  GO-2022-1060: Gogs vulnerable to Cross-site Scripting in gogs.io/gogs

  GO-2023-1596: Gogs OS Command Injection vulnerability in gogs.io/gogs

  GO-2023-1971: Gogs and Gitea SSRF Vulnerability in code.gitea.io/gitea

  GO-2023-1972: Gogs XSS Vulnerability in gogs.io/gogs

  GO-2024-3275: Unpatched Remote Code Execution in Gogs in gogs.io/gogs

  GO-2024-3355: Remote Command Execution in file editing in gogs in gogs.io/gogs

  GO-2024-3356: Path Traversal in file update API in gogs in gogs.io/gogs

Aug 3, 2016 GO-2022-0369 +22 more

  GO-2022-0369: Gogs vulnerable to improper PAM authorization handling in gogs.io/gogs

  GO-2022-0377: SSRF in repository migration in gogs.io/gogs

  GO-2022-0471: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0473: Cross site scripting via cookies in gogs in gogs.io/gogs

  GO-2022-0483: Cross-site Scripting vulnerability in repository issue list in Gogs in gogs.io/gogs

  GO-2022-0554: Unrestricted Upload of File with Dangerous Type in Gogs in gogs.io/gogs

  GO-2022-0556: OS Command Injection in file editor in Gogs in gogs.io/gogs

  GO-2022-0562: Path Traversal in Git HTTP endpoints in Gogs in gogs.io/gogs

  GO-2022-0566: SSRF in repository migration in gogs.io/gogs

  GO-2022-0570: Path Traversal in file editor on Windows in Gogs in gogs.io/gogs

  GO-2022-0583: Server-Side Request Forgery in gogs webhook in gogs.io/gogs

  GO-2022-0597: Cross-site Scripting in Gogs in gogs.io/gogs

  GO-2022-0749: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0788: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0797: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0822: Open Redirect in gogs.io/gogs

  GO-2022-1060: Gogs vulnerable to Cross-site Scripting in gogs.io/gogs

  GO-2023-1596: Gogs OS Command Injection vulnerability in gogs.io/gogs

  GO-2023-1971: Gogs and Gitea SSRF Vulnerability in code.gitea.io/gitea

  GO-2023-1972: Gogs XSS Vulnerability in gogs.io/gogs

  GO-2024-3275: Unpatched Remote Code Execution in Gogs in gogs.io/gogs

  GO-2024-3355: Remote Command Execution in file editing in gogs in gogs.io/gogs

  GO-2024-3356: Path Traversal in file update API in gogs in gogs.io/gogs

Jul 22, 2016 GO-2022-0369 +22 more

  GO-2022-0369: Gogs vulnerable to improper PAM authorization handling in gogs.io/gogs

  GO-2022-0377: SSRF in repository migration in gogs.io/gogs

  GO-2022-0471: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0473: Cross site scripting via cookies in gogs in gogs.io/gogs

  GO-2022-0483: Cross-site Scripting vulnerability in repository issue list in Gogs in gogs.io/gogs

  GO-2022-0554: Unrestricted Upload of File with Dangerous Type in Gogs in gogs.io/gogs

  GO-2022-0556: OS Command Injection in file editor in Gogs in gogs.io/gogs

  GO-2022-0562: Path Traversal in Git HTTP endpoints in Gogs in gogs.io/gogs

  GO-2022-0566: SSRF in repository migration in gogs.io/gogs

  GO-2022-0570: Path Traversal in file editor on Windows in Gogs in gogs.io/gogs

  GO-2022-0583: Server-Side Request Forgery in gogs webhook in gogs.io/gogs

  GO-2022-0597: Cross-site Scripting in Gogs in gogs.io/gogs

  GO-2022-0749: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0788: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0797: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0822: Open Redirect in gogs.io/gogs

  GO-2022-1060: Gogs vulnerable to Cross-site Scripting in gogs.io/gogs

  GO-2023-1596: Gogs OS Command Injection vulnerability in gogs.io/gogs

  GO-2023-1971: Gogs and Gitea SSRF Vulnerability in code.gitea.io/gitea

  GO-2023-1972: Gogs XSS Vulnerability in gogs.io/gogs

  GO-2024-3275: Unpatched Remote Code Execution in Gogs in gogs.io/gogs

  GO-2024-3355: Remote Command Execution in file editing in gogs in gogs.io/gogs

  GO-2024-3356: Path Traversal in file update API in gogs in gogs.io/gogs

Jul 17, 2016 GO-2022-0369 +22 more

  GO-2022-0369: Gogs vulnerable to improper PAM authorization handling in gogs.io/gogs

  GO-2022-0377: SSRF in repository migration in gogs.io/gogs

  GO-2022-0471: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0473: Cross site scripting via cookies in gogs in gogs.io/gogs

  GO-2022-0483: Cross-site Scripting vulnerability in repository issue list in Gogs in gogs.io/gogs

  GO-2022-0554: Unrestricted Upload of File with Dangerous Type in Gogs in gogs.io/gogs

  GO-2022-0556: OS Command Injection in file editor in Gogs in gogs.io/gogs

  GO-2022-0562: Path Traversal in Git HTTP endpoints in Gogs in gogs.io/gogs

  GO-2022-0566: SSRF in repository migration in gogs.io/gogs

  GO-2022-0570: Path Traversal in file editor on Windows in Gogs in gogs.io/gogs

  GO-2022-0583: Server-Side Request Forgery in gogs webhook in gogs.io/gogs

  GO-2022-0597: Cross-site Scripting in Gogs in gogs.io/gogs

  GO-2022-0749: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0788: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0797: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0822: Open Redirect in gogs.io/gogs

  GO-2022-1060: Gogs vulnerable to Cross-site Scripting in gogs.io/gogs

  GO-2023-1596: Gogs OS Command Injection vulnerability in gogs.io/gogs

  GO-2023-1971: Gogs and Gitea SSRF Vulnerability in code.gitea.io/gitea

  GO-2023-1972: Gogs XSS Vulnerability in gogs.io/gogs

  GO-2024-3275: Unpatched Remote Code Execution in Gogs in gogs.io/gogs

  GO-2024-3355: Remote Command Execution in file editing in gogs in gogs.io/gogs

  GO-2024-3356: Path Traversal in file update API in gogs in gogs.io/gogs

Changes in this version

+ func IsPDFFile(data []byte) (string, bool)

Mar 19, 2016 GO-2022-0369 +22 more

  GO-2022-0369: Gogs vulnerable to improper PAM authorization handling in gogs.io/gogs

  GO-2022-0377: SSRF in repository migration in gogs.io/gogs

  GO-2022-0471: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0473: Cross site scripting via cookies in gogs in gogs.io/gogs

  GO-2022-0483: Cross-site Scripting vulnerability in repository issue list in Gogs in gogs.io/gogs

  GO-2022-0554: Unrestricted Upload of File with Dangerous Type in Gogs in gogs.io/gogs

  GO-2022-0556: OS Command Injection in file editor in Gogs in gogs.io/gogs

  GO-2022-0562: Path Traversal in Git HTTP endpoints in Gogs in gogs.io/gogs

  GO-2022-0566: SSRF in repository migration in gogs.io/gogs

  GO-2022-0570: Path Traversal in file editor on Windows in Gogs in gogs.io/gogs

  GO-2022-0583: Server-Side Request Forgery in gogs webhook in gogs.io/gogs

  GO-2022-0597: Cross-site Scripting in Gogs in gogs.io/gogs

  GO-2022-0749: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0788: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0797: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0822: Open Redirect in gogs.io/gogs

  GO-2022-1060: Gogs vulnerable to Cross-site Scripting in gogs.io/gogs

  GO-2023-1596: Gogs OS Command Injection vulnerability in gogs.io/gogs

  GO-2023-1971: Gogs and Gitea SSRF Vulnerability in code.gitea.io/gitea

  GO-2023-1972: Gogs XSS Vulnerability in gogs.io/gogs

  GO-2024-3275: Unpatched Remote Code Execution in Gogs in gogs.io/gogs

  GO-2024-3355: Remote Command Execution in file editing in gogs in gogs.io/gogs

  GO-2024-3356: Path Traversal in file update API in gogs in gogs.io/gogs

Mar 7, 2016 GO-2022-0369 +22 more

  GO-2022-0369: Gogs vulnerable to improper PAM authorization handling in gogs.io/gogs

  GO-2022-0377: SSRF in repository migration in gogs.io/gogs

  GO-2022-0471: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0473: Cross site scripting via cookies in gogs in gogs.io/gogs

  GO-2022-0483: Cross-site Scripting vulnerability in repository issue list in Gogs in gogs.io/gogs

  GO-2022-0554: Unrestricted Upload of File with Dangerous Type in Gogs in gogs.io/gogs

  GO-2022-0556: OS Command Injection in file editor in Gogs in gogs.io/gogs

  GO-2022-0562: Path Traversal in Git HTTP endpoints in Gogs in gogs.io/gogs

  GO-2022-0566: SSRF in repository migration in gogs.io/gogs

  GO-2022-0570: Path Traversal in file editor on Windows in Gogs in gogs.io/gogs

  GO-2022-0583: Server-Side Request Forgery in gogs webhook in gogs.io/gogs

  GO-2022-0597: Cross-site Scripting in Gogs in gogs.io/gogs

  GO-2022-0749: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0788: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0797: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0822: Open Redirect in gogs.io/gogs

  GO-2022-1060: Gogs vulnerable to Cross-site Scripting in gogs.io/gogs

  GO-2023-1596: Gogs OS Command Injection vulnerability in gogs.io/gogs

  GO-2023-1971: Gogs and Gitea SSRF Vulnerability in code.gitea.io/gitea

  GO-2023-1972: Gogs XSS Vulnerability in gogs.io/gogs

  GO-2024-3275: Unpatched Remote Code Execution in Gogs in gogs.io/gogs

  GO-2024-3355: Remote Command Execution in file editing in gogs in gogs.io/gogs

  GO-2024-3356: Path Traversal in file update API in gogs in gogs.io/gogs

Changes in this version

+ func TruncateString(str string, limit int) string

Feb 24, 2016 GO-2022-0369 +22 more

  GO-2022-0369: Gogs vulnerable to improper PAM authorization handling in gogs.io/gogs

  GO-2022-0377: SSRF in repository migration in gogs.io/gogs

  GO-2022-0471: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0473: Cross site scripting via cookies in gogs in gogs.io/gogs

  GO-2022-0483: Cross-site Scripting vulnerability in repository issue list in Gogs in gogs.io/gogs

  GO-2022-0554: Unrestricted Upload of File with Dangerous Type in Gogs in gogs.io/gogs

  GO-2022-0556: OS Command Injection in file editor in Gogs in gogs.io/gogs

  GO-2022-0562: Path Traversal in Git HTTP endpoints in Gogs in gogs.io/gogs

  GO-2022-0566: SSRF in repository migration in gogs.io/gogs

  GO-2022-0570: Path Traversal in file editor on Windows in Gogs in gogs.io/gogs

  GO-2022-0583: Server-Side Request Forgery in gogs webhook in gogs.io/gogs

  GO-2022-0597: Cross-site Scripting in Gogs in gogs.io/gogs

  GO-2022-0749: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0788: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0797: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0822: Open Redirect in gogs.io/gogs

  GO-2022-1060: Gogs vulnerable to Cross-site Scripting in gogs.io/gogs

  GO-2023-1596: Gogs OS Command Injection vulnerability in gogs.io/gogs

  GO-2023-1971: Gogs and Gitea SSRF Vulnerability in code.gitea.io/gitea

  GO-2023-1972: Gogs XSS Vulnerability in gogs.io/gogs

  GO-2024-3275: Unpatched Remote Code Execution in Gogs in gogs.io/gogs

  GO-2024-3355: Remote Command Execution in file editing in gogs in gogs.io/gogs

  GO-2024-3356: Path Traversal in file update API in gogs in gogs.io/gogs

Changes in this version

+ func HashEmail(email string) string

+ func IsLetter(ch rune) bool

Jan 30, 2016 GO-2022-0369 +22 more

  GO-2022-0369: Gogs vulnerable to improper PAM authorization handling in gogs.io/gogs

  GO-2022-0377: SSRF in repository migration in gogs.io/gogs

  GO-2022-0471: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0473: Cross site scripting via cookies in gogs in gogs.io/gogs

  GO-2022-0483: Cross-site Scripting vulnerability in repository issue list in Gogs in gogs.io/gogs

  GO-2022-0554: Unrestricted Upload of File with Dangerous Type in Gogs in gogs.io/gogs

  GO-2022-0556: OS Command Injection in file editor in Gogs in gogs.io/gogs

  GO-2022-0562: Path Traversal in Git HTTP endpoints in Gogs in gogs.io/gogs

  GO-2022-0566: SSRF in repository migration in gogs.io/gogs

  GO-2022-0570: Path Traversal in file editor on Windows in Gogs in gogs.io/gogs

  GO-2022-0583: Server-Side Request Forgery in gogs webhook in gogs.io/gogs

  GO-2022-0597: Cross-site Scripting in Gogs in gogs.io/gogs

  GO-2022-0749: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0788: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0797: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0822: Open Redirect in gogs.io/gogs

  GO-2022-1060: Gogs vulnerable to Cross-site Scripting in gogs.io/gogs

  GO-2023-1596: Gogs OS Command Injection vulnerability in gogs.io/gogs

  GO-2023-1971: Gogs and Gitea SSRF Vulnerability in code.gitea.io/gitea

  GO-2023-1972: Gogs XSS Vulnerability in gogs.io/gogs

  GO-2024-3275: Unpatched Remote Code Execution in Gogs in gogs.io/gogs

  GO-2024-3355: Remote Command Execution in file editing in gogs in gogs.io/gogs

  GO-2024-3356: Path Traversal in file update API in gogs in gogs.io/gogs

Changes in this version

+ func BuildSanitizer() (p *bluemonday.Policy)

+ func EllipsisString(str string, length int) string

type CustomRender

+ func (options *CustomRender) ListItem(out *bytes.Buffer, text []byte, flags int)

+ func (r *CustomRender) AutoLink(out *bytes.Buffer, link []byte, kind int)

Dec 18, 2015 GO-2022-0369 +22 more

  GO-2022-0369: Gogs vulnerable to improper PAM authorization handling in gogs.io/gogs

  GO-2022-0377: SSRF in repository migration in gogs.io/gogs

  GO-2022-0471: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0473: Cross site scripting via cookies in gogs in gogs.io/gogs

  GO-2022-0483: Cross-site Scripting vulnerability in repository issue list in Gogs in gogs.io/gogs

  GO-2022-0554: Unrestricted Upload of File with Dangerous Type in Gogs in gogs.io/gogs

  GO-2022-0556: OS Command Injection in file editor in Gogs in gogs.io/gogs

  GO-2022-0562: Path Traversal in Git HTTP endpoints in Gogs in gogs.io/gogs

  GO-2022-0566: SSRF in repository migration in gogs.io/gogs

  GO-2022-0570: Path Traversal in file editor on Windows in Gogs in gogs.io/gogs

  GO-2022-0583: Server-Side Request Forgery in gogs webhook in gogs.io/gogs

  GO-2022-0597: Cross-site Scripting in Gogs in gogs.io/gogs

  GO-2022-0749: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0788: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0797: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0822: Open Redirect in gogs.io/gogs

  GO-2022-1060: Gogs vulnerable to Cross-site Scripting in gogs.io/gogs

  GO-2023-1596: Gogs OS Command Injection vulnerability in gogs.io/gogs

  GO-2023-1971: Gogs and Gitea SSRF Vulnerability in code.gitea.io/gitea

  GO-2023-1972: Gogs XSS Vulnerability in gogs.io/gogs

  GO-2024-3275: Unpatched Remote Code Execution in Gogs in gogs.io/gogs

  GO-2024-3355: Remote Command Execution in file editing in gogs in gogs.io/gogs

  GO-2024-3356: Path Traversal in file update API in gogs in gogs.io/gogs

Dec 13, 2015 GO-2022-0369 +22 more

  GO-2022-0369: Gogs vulnerable to improper PAM authorization handling in gogs.io/gogs

  GO-2022-0377: SSRF in repository migration in gogs.io/gogs

  GO-2022-0471: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0473: Cross site scripting via cookies in gogs in gogs.io/gogs

  GO-2022-0483: Cross-site Scripting vulnerability in repository issue list in Gogs in gogs.io/gogs

  GO-2022-0554: Unrestricted Upload of File with Dangerous Type in Gogs in gogs.io/gogs

  GO-2022-0556: OS Command Injection in file editor in Gogs in gogs.io/gogs

  GO-2022-0562: Path Traversal in Git HTTP endpoints in Gogs in gogs.io/gogs

  GO-2022-0566: SSRF in repository migration in gogs.io/gogs

  GO-2022-0570: Path Traversal in file editor on Windows in Gogs in gogs.io/gogs

  GO-2022-0583: Server-Side Request Forgery in gogs webhook in gogs.io/gogs

  GO-2022-0597: Cross-site Scripting in Gogs in gogs.io/gogs

  GO-2022-0749: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0788: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0797: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0822: Open Redirect in gogs.io/gogs

  GO-2022-1060: Gogs vulnerable to Cross-site Scripting in gogs.io/gogs

  GO-2023-1596: Gogs OS Command Injection vulnerability in gogs.io/gogs

  GO-2023-1971: Gogs and Gitea SSRF Vulnerability in code.gitea.io/gitea

  GO-2023-1972: Gogs XSS Vulnerability in gogs.io/gogs

  GO-2024-3275: Unpatched Remote Code Execution in Gogs in gogs.io/gogs

  GO-2024-3355: Remote Command Execution in file editing in gogs in gogs.io/gogs

  GO-2024-3356: Path Traversal in file update API in gogs in gogs.io/gogs

Dec 6, 2015 GO-2022-0369 +22 more

  GO-2022-0369: Gogs vulnerable to improper PAM authorization handling in gogs.io/gogs

  GO-2022-0377: SSRF in repository migration in gogs.io/gogs

  GO-2022-0471: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0473: Cross site scripting via cookies in gogs in gogs.io/gogs

  GO-2022-0483: Cross-site Scripting vulnerability in repository issue list in Gogs in gogs.io/gogs

  GO-2022-0554: Unrestricted Upload of File with Dangerous Type in Gogs in gogs.io/gogs

  GO-2022-0556: OS Command Injection in file editor in Gogs in gogs.io/gogs

  GO-2022-0562: Path Traversal in Git HTTP endpoints in Gogs in gogs.io/gogs

  GO-2022-0566: SSRF in repository migration in gogs.io/gogs

  GO-2022-0570: Path Traversal in file editor on Windows in Gogs in gogs.io/gogs

  GO-2022-0583: Server-Side Request Forgery in gogs webhook in gogs.io/gogs

  GO-2022-0597: Cross-site Scripting in Gogs in gogs.io/gogs

  GO-2022-0749: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0788: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0797: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0822: Open Redirect in gogs.io/gogs

  GO-2022-1060: Gogs vulnerable to Cross-site Scripting in gogs.io/gogs

  GO-2023-1596: Gogs OS Command Injection vulnerability in gogs.io/gogs

  GO-2023-1971: Gogs and Gitea SSRF Vulnerability in code.gitea.io/gitea

  GO-2023-1972: Gogs XSS Vulnerability in gogs.io/gogs

  GO-2024-3275: Unpatched Remote Code Execution in Gogs in gogs.io/gogs

  GO-2024-3355: Remote Command Execution in file editing in gogs in gogs.io/gogs

  GO-2024-3356: Path Traversal in file update API in gogs in gogs.io/gogs

Changes in this version

+ func PreProcessMarkdown(rawHTML []byte, urlPrefix string) []byte

Nov 25, 2015 GO-2022-0369 +22 more

  GO-2022-0369: Gogs vulnerable to improper PAM authorization handling in gogs.io/gogs

  GO-2022-0377: SSRF in repository migration in gogs.io/gogs

  GO-2022-0471: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0473: Cross site scripting via cookies in gogs in gogs.io/gogs

  GO-2022-0483: Cross-site Scripting vulnerability in repository issue list in Gogs in gogs.io/gogs

  GO-2022-0554: Unrestricted Upload of File with Dangerous Type in Gogs in gogs.io/gogs

  GO-2022-0556: OS Command Injection in file editor in Gogs in gogs.io/gogs

  GO-2022-0562: Path Traversal in Git HTTP endpoints in Gogs in gogs.io/gogs

  GO-2022-0566: SSRF in repository migration in gogs.io/gogs

  GO-2022-0570: Path Traversal in file editor on Windows in Gogs in gogs.io/gogs

  GO-2022-0583: Server-Side Request Forgery in gogs webhook in gogs.io/gogs

  GO-2022-0597: Cross-site Scripting in Gogs in gogs.io/gogs

  GO-2022-0749: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0788: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0797: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0822: Open Redirect in gogs.io/gogs

  GO-2022-1060: Gogs vulnerable to Cross-site Scripting in gogs.io/gogs

  GO-2023-1596: Gogs OS Command Injection vulnerability in gogs.io/gogs

  GO-2023-1971: Gogs and Gitea SSRF Vulnerability in code.gitea.io/gitea

  GO-2023-1972: Gogs XSS Vulnerability in gogs.io/gogs

  GO-2024-3275: Unpatched Remote Code Execution in Gogs in gogs.io/gogs

  GO-2024-3355: Remote Command Execution in file editing in gogs in gogs.io/gogs

  GO-2024-3356: Path Traversal in file update API in gogs in gogs.io/gogs

Changes in this version

+ func EncodeMD5(str string) string

Nov 21, 2015 GO-2022-0369 +22 more

  GO-2022-0369: Gogs vulnerable to improper PAM authorization handling in gogs.io/gogs

  GO-2022-0377: SSRF in repository migration in gogs.io/gogs

  GO-2022-0471: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0473: Cross site scripting via cookies in gogs in gogs.io/gogs

  GO-2022-0483: Cross-site Scripting vulnerability in repository issue list in Gogs in gogs.io/gogs

  GO-2022-0554: Unrestricted Upload of File with Dangerous Type in Gogs in gogs.io/gogs

  GO-2022-0556: OS Command Injection in file editor in Gogs in gogs.io/gogs

  GO-2022-0562: Path Traversal in Git HTTP endpoints in Gogs in gogs.io/gogs

  GO-2022-0566: SSRF in repository migration in gogs.io/gogs

  GO-2022-0570: Path Traversal in file editor on Windows in Gogs in gogs.io/gogs

  GO-2022-0583: Server-Side Request Forgery in gogs webhook in gogs.io/gogs

  GO-2022-0597: Cross-site Scripting in Gogs in gogs.io/gogs

  GO-2022-0749: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0788: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0797: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0822: Open Redirect in gogs.io/gogs

  GO-2022-1060: Gogs vulnerable to Cross-site Scripting in gogs.io/gogs

  GO-2023-1596: Gogs OS Command Injection vulnerability in gogs.io/gogs

  GO-2023-1971: Gogs and Gitea SSRF Vulnerability in code.gitea.io/gitea

  GO-2023-1972: Gogs XSS Vulnerability in gogs.io/gogs

  GO-2024-3275: Unpatched Remote Code Execution in Gogs in gogs.io/gogs

  GO-2024-3355: Remote Command Execution in file editing in gogs in gogs.io/gogs

  GO-2024-3356: Path Traversal in file update API in gogs in gogs.io/gogs

Nov 12, 2015 GO-2022-0369 +22 more

  GO-2022-0369: Gogs vulnerable to improper PAM authorization handling in gogs.io/gogs

  GO-2022-0377: SSRF in repository migration in gogs.io/gogs

  GO-2022-0471: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0473: Cross site scripting via cookies in gogs in gogs.io/gogs

  GO-2022-0483: Cross-site Scripting vulnerability in repository issue list in Gogs in gogs.io/gogs

  GO-2022-0554: Unrestricted Upload of File with Dangerous Type in Gogs in gogs.io/gogs

  GO-2022-0556: OS Command Injection in file editor in Gogs in gogs.io/gogs

  GO-2022-0562: Path Traversal in Git HTTP endpoints in Gogs in gogs.io/gogs

  GO-2022-0566: SSRF in repository migration in gogs.io/gogs

  GO-2022-0570: Path Traversal in file editor on Windows in Gogs in gogs.io/gogs

  GO-2022-0583: Server-Side Request Forgery in gogs webhook in gogs.io/gogs

  GO-2022-0597: Cross-site Scripting in Gogs in gogs.io/gogs

  GO-2022-0749: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0788: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0797: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0822: Open Redirect in gogs.io/gogs

  GO-2022-1060: Gogs vulnerable to Cross-site Scripting in gogs.io/gogs

  GO-2023-1596: Gogs OS Command Injection vulnerability in gogs.io/gogs

  GO-2023-1971: Gogs and Gitea SSRF Vulnerability in code.gitea.io/gitea

  GO-2023-1972: Gogs XSS Vulnerability in gogs.io/gogs

  GO-2024-3275: Unpatched Remote Code Execution in Gogs in gogs.io/gogs

  GO-2024-3355: Remote Command Execution in file editing in gogs in gogs.io/gogs

  GO-2024-3356: Path Traversal in file update API in gogs in gogs.io/gogs

Changes in this version

+ func ExecPath() (string, error)

Nov 8, 2015 GO-2022-0369 +22 more

  GO-2022-0369: Gogs vulnerable to improper PAM authorization handling in gogs.io/gogs

  GO-2022-0377: SSRF in repository migration in gogs.io/gogs

  GO-2022-0471: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0473: Cross site scripting via cookies in gogs in gogs.io/gogs

  GO-2022-0483: Cross-site Scripting vulnerability in repository issue list in Gogs in gogs.io/gogs

  GO-2022-0554: Unrestricted Upload of File with Dangerous Type in Gogs in gogs.io/gogs

  GO-2022-0556: OS Command Injection in file editor in Gogs in gogs.io/gogs

  GO-2022-0562: Path Traversal in Git HTTP endpoints in Gogs in gogs.io/gogs

  GO-2022-0566: SSRF in repository migration in gogs.io/gogs

  GO-2022-0570: Path Traversal in file editor on Windows in Gogs in gogs.io/gogs

  GO-2022-0583: Server-Side Request Forgery in gogs webhook in gogs.io/gogs

  GO-2022-0597: Cross-site Scripting in Gogs in gogs.io/gogs

  GO-2022-0749: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0788: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0797: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0822: Open Redirect in gogs.io/gogs

  GO-2022-1060: Gogs vulnerable to Cross-site Scripting in gogs.io/gogs

  GO-2023-1596: Gogs OS Command Injection vulnerability in gogs.io/gogs

  GO-2023-1971: Gogs and Gitea SSRF Vulnerability in code.gitea.io/gitea

  GO-2023-1972: Gogs XSS Vulnerability in gogs.io/gogs

  GO-2024-3275: Unpatched Remote Code Execution in Gogs in gogs.io/gogs

  GO-2024-3355: Remote Command Execution in file editing in gogs in gogs.io/gogs

  GO-2024-3356: Path Traversal in file update API in gogs in gogs.io/gogs

Sep 26, 2015 GO-2022-0369 +22 more

  GO-2022-0369: Gogs vulnerable to improper PAM authorization handling in gogs.io/gogs

  GO-2022-0377: SSRF in repository migration in gogs.io/gogs

  GO-2022-0471: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0473: Cross site scripting via cookies in gogs in gogs.io/gogs

  GO-2022-0483: Cross-site Scripting vulnerability in repository issue list in Gogs in gogs.io/gogs

  GO-2022-0554: Unrestricted Upload of File with Dangerous Type in Gogs in gogs.io/gogs

  GO-2022-0556: OS Command Injection in file editor in Gogs in gogs.io/gogs

  GO-2022-0562: Path Traversal in Git HTTP endpoints in Gogs in gogs.io/gogs

  GO-2022-0566: SSRF in repository migration in gogs.io/gogs

  GO-2022-0570: Path Traversal in file editor on Windows in Gogs in gogs.io/gogs

  GO-2022-0583: Server-Side Request Forgery in gogs webhook in gogs.io/gogs

  GO-2022-0597: Cross-site Scripting in Gogs in gogs.io/gogs

  GO-2022-0749: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0788: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0797: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0822: Open Redirect in gogs.io/gogs

  GO-2022-1060: Gogs vulnerable to Cross-site Scripting in gogs.io/gogs

  GO-2023-1596: Gogs OS Command Injection vulnerability in gogs.io/gogs

  GO-2023-1971: Gogs and Gitea SSRF Vulnerability in code.gitea.io/gitea

  GO-2023-1972: Gogs XSS Vulnerability in gogs.io/gogs

  GO-2024-3275: Unpatched Remote Code Execution in Gogs in gogs.io/gogs

  GO-2024-3355: Remote Command Execution in file editing in gogs in gogs.io/gogs

  GO-2024-3356: Path Traversal in file update API in gogs in gogs.io/gogs

Changes in this version

+ func ReplaceLeft(s, old, new string) string

Sep 5, 2015 GO-2022-0369 +22 more

  GO-2022-0369: Gogs vulnerable to improper PAM authorization handling in gogs.io/gogs

  GO-2022-0377: SSRF in repository migration in gogs.io/gogs

  GO-2022-0471: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0473: Cross site scripting via cookies in gogs in gogs.io/gogs

  GO-2022-0483: Cross-site Scripting vulnerability in repository issue list in Gogs in gogs.io/gogs

  GO-2022-0554: Unrestricted Upload of File with Dangerous Type in Gogs in gogs.io/gogs

  GO-2022-0556: OS Command Injection in file editor in Gogs in gogs.io/gogs

  GO-2022-0562: Path Traversal in Git HTTP endpoints in Gogs in gogs.io/gogs

  GO-2022-0566: SSRF in repository migration in gogs.io/gogs

  GO-2022-0570: Path Traversal in file editor on Windows in Gogs in gogs.io/gogs

  GO-2022-0583: Server-Side Request Forgery in gogs webhook in gogs.io/gogs

  GO-2022-0597: Cross-site Scripting in Gogs in gogs.io/gogs

  GO-2022-0749: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0788: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0797: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0822: Open Redirect in gogs.io/gogs

  GO-2022-1060: Gogs vulnerable to Cross-site Scripting in gogs.io/gogs

  GO-2023-1596: Gogs OS Command Injection vulnerability in gogs.io/gogs

  GO-2023-1971: Gogs and Gitea SSRF Vulnerability in code.gitea.io/gitea

  GO-2023-1972: Gogs XSS Vulnerability in gogs.io/gogs

  GO-2024-3275: Unpatched Remote Code Execution in Gogs in gogs.io/gogs

  GO-2024-3355: Remote Command Execution in file editing in gogs in gogs.io/gogs

  GO-2024-3356: Path Traversal in file update API in gogs in gogs.io/gogs

Changes in this version

+ func Int64sToStrings(ints []int64) []string

type Actioner

+ GetCreate func() time.Time

+ GetIssueInfos func() []string

+ GetRepoLink func() string

+ GetRepoPath func() string

Aug 16, 2015 GO-2022-0369 +22 more

  GO-2022-0369: Gogs vulnerable to improper PAM authorization handling in gogs.io/gogs

  GO-2022-0377: SSRF in repository migration in gogs.io/gogs

  GO-2022-0471: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0473: Cross site scripting via cookies in gogs in gogs.io/gogs

  GO-2022-0483: Cross-site Scripting vulnerability in repository issue list in Gogs in gogs.io/gogs

  GO-2022-0554: Unrestricted Upload of File with Dangerous Type in Gogs in gogs.io/gogs

  GO-2022-0556: OS Command Injection in file editor in Gogs in gogs.io/gogs

  GO-2022-0562: Path Traversal in Git HTTP endpoints in Gogs in gogs.io/gogs

  GO-2022-0566: SSRF in repository migration in gogs.io/gogs

  GO-2022-0570: Path Traversal in file editor on Windows in Gogs in gogs.io/gogs

  GO-2022-0583: Server-Side Request Forgery in gogs webhook in gogs.io/gogs

  GO-2022-0597: Cross-site Scripting in Gogs in gogs.io/gogs

  GO-2022-0749: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0788: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0797: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0822: Open Redirect in gogs.io/gogs

  GO-2022-1060: Gogs vulnerable to Cross-site Scripting in gogs.io/gogs

  GO-2023-1596: Gogs OS Command Injection vulnerability in gogs.io/gogs

  GO-2023-1971: Gogs and Gitea SSRF Vulnerability in code.gitea.io/gitea

  GO-2023-1972: Gogs XSS Vulnerability in gogs.io/gogs

  GO-2024-3275: Unpatched Remote Code Execution in Gogs in gogs.io/gogs

  GO-2024-3355: Remote Command Execution in file editing in gogs in gogs.io/gogs

  GO-2024-3356: Path Traversal in file update API in gogs in gogs.io/gogs

Changes in this version

+ func Int64sToMap(ints []int64) map[int64]bool

+ func RawTimeSince(t time.Time, lang string) string

+ func Safe(raw string) template.HTML

+ func StringsToInt64s(strs []string) []int64

Aug 2, 2015 GO-2022-0369 +21 more

  GO-2022-0369: Gogs vulnerable to improper PAM authorization handling in gogs.io/gogs

  GO-2022-0377: SSRF in repository migration in gogs.io/gogs

  GO-2022-0471: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0473: Cross site scripting via cookies in gogs in gogs.io/gogs

  GO-2022-0483: Cross-site Scripting vulnerability in repository issue list in Gogs in gogs.io/gogs

  GO-2022-0554: Unrestricted Upload of File with Dangerous Type in Gogs in gogs.io/gogs

  GO-2022-0556: OS Command Injection in file editor in Gogs in gogs.io/gogs

  GO-2022-0562: Path Traversal in Git HTTP endpoints in Gogs in gogs.io/gogs

  GO-2022-0566: SSRF in repository migration in gogs.io/gogs

  GO-2022-0570: Path Traversal in file editor on Windows in Gogs in gogs.io/gogs

  GO-2022-0583: Server-Side Request Forgery in gogs webhook in gogs.io/gogs

  GO-2022-0597: Cross-site Scripting in Gogs in gogs.io/gogs

  GO-2022-0749: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0788: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0797: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0822: Open Redirect in gogs.io/gogs

  GO-2023-1596: Gogs OS Command Injection vulnerability in gogs.io/gogs

  GO-2023-1971: Gogs and Gitea SSRF Vulnerability in code.gitea.io/gitea

  GO-2023-1972: Gogs XSS Vulnerability in gogs.io/gogs

  GO-2024-3275: Unpatched Remote Code Execution in Gogs in gogs.io/gogs

  GO-2024-3355: Remote Command Execution in file editing in gogs in gogs.io/gogs

  GO-2024-3356: Path Traversal in file update API in gogs in gogs.io/gogs

Mar 26, 2015 GO-2022-0369 +21 more

  GO-2022-0369: Gogs vulnerable to improper PAM authorization handling in gogs.io/gogs

  GO-2022-0377: SSRF in repository migration in gogs.io/gogs

  GO-2022-0471: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0473: Cross site scripting via cookies in gogs in gogs.io/gogs

  GO-2022-0483: Cross-site Scripting vulnerability in repository issue list in Gogs in gogs.io/gogs

  GO-2022-0554: Unrestricted Upload of File with Dangerous Type in Gogs in gogs.io/gogs

  GO-2022-0556: OS Command Injection in file editor in Gogs in gogs.io/gogs

  GO-2022-0562: Path Traversal in Git HTTP endpoints in Gogs in gogs.io/gogs

  GO-2022-0566: SSRF in repository migration in gogs.io/gogs

  GO-2022-0570: Path Traversal in file editor on Windows in Gogs in gogs.io/gogs

  GO-2022-0583: Server-Side Request Forgery in gogs webhook in gogs.io/gogs

  GO-2022-0597: Cross-site Scripting in Gogs in gogs.io/gogs

  GO-2022-0749: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0788: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0797: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0822: Open Redirect in gogs.io/gogs

  GO-2023-1596: Gogs OS Command Injection vulnerability in gogs.io/gogs

  GO-2023-1971: Gogs and Gitea SSRF Vulnerability in code.gitea.io/gitea

  GO-2023-1972: Gogs XSS Vulnerability in gogs.io/gogs

  GO-2024-3275: Unpatched Remote Code Execution in Gogs in gogs.io/gogs

  GO-2024-3355: Remote Command Execution in file editing in gogs in gogs.io/gogs

  GO-2024-3356: Path Traversal in file update API in gogs in gogs.io/gogs

Changes in this version

+ func PostProcessMarkdown(rawHtml []byte, urlPrefix string) []byte

Mar 19, 2015 GO-2022-0369 +21 more

  GO-2022-0369: Gogs vulnerable to improper PAM authorization handling in gogs.io/gogs

  GO-2022-0377: SSRF in repository migration in gogs.io/gogs

  GO-2022-0471: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0473: Cross site scripting via cookies in gogs in gogs.io/gogs

  GO-2022-0483: Cross-site Scripting vulnerability in repository issue list in Gogs in gogs.io/gogs

  GO-2022-0554: Unrestricted Upload of File with Dangerous Type in Gogs in gogs.io/gogs

  GO-2022-0556: OS Command Injection in file editor in Gogs in gogs.io/gogs

  GO-2022-0562: Path Traversal in Git HTTP endpoints in Gogs in gogs.io/gogs

  GO-2022-0566: SSRF in repository migration in gogs.io/gogs

  GO-2022-0570: Path Traversal in file editor on Windows in Gogs in gogs.io/gogs

  GO-2022-0583: Server-Side Request Forgery in gogs webhook in gogs.io/gogs

  GO-2022-0597: Cross-site Scripting in Gogs in gogs.io/gogs

  GO-2022-0749: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0788: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0797: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0822: Open Redirect in gogs.io/gogs

  GO-2023-1596: Gogs OS Command Injection vulnerability in gogs.io/gogs

  GO-2023-1971: Gogs and Gitea SSRF Vulnerability in code.gitea.io/gitea

  GO-2023-1972: Gogs XSS Vulnerability in gogs.io/gogs

  GO-2024-3275: Unpatched Remote Code Execution in Gogs in gogs.io/gogs

  GO-2024-3355: Remote Command Execution in file editing in gogs in gogs.io/gogs

  GO-2024-3356: Path Traversal in file update API in gogs in gogs.io/gogs

Changes in this version

+ func Sha1(str string) string

Feb 13, 2015 GO-2022-0369 +21 more

  GO-2022-0369: Gogs vulnerable to improper PAM authorization handling in gogs.io/gogs

  GO-2022-0377: SSRF in repository migration in gogs.io/gogs

  GO-2022-0471: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0473: Cross site scripting via cookies in gogs in gogs.io/gogs

  GO-2022-0483: Cross-site Scripting vulnerability in repository issue list in Gogs in gogs.io/gogs

  GO-2022-0554: Unrestricted Upload of File with Dangerous Type in Gogs in gogs.io/gogs

  GO-2022-0556: OS Command Injection in file editor in Gogs in gogs.io/gogs

  GO-2022-0562: Path Traversal in Git HTTP endpoints in Gogs in gogs.io/gogs

  GO-2022-0566: SSRF in repository migration in gogs.io/gogs

  GO-2022-0570: Path Traversal in file editor on Windows in Gogs in gogs.io/gogs

  GO-2022-0583: Server-Side Request Forgery in gogs webhook in gogs.io/gogs

  GO-2022-0597: Cross-site Scripting in Gogs in gogs.io/gogs

  GO-2022-0749: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0788: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0797: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0822: Open Redirect in gogs.io/gogs

  GO-2023-1596: Gogs OS Command Injection vulnerability in gogs.io/gogs

  GO-2023-1971: Gogs and Gitea SSRF Vulnerability in code.gitea.io/gitea

  GO-2023-1972: Gogs XSS Vulnerability in gogs.io/gogs

  GO-2024-3275: Unpatched Remote Code Execution in Gogs in gogs.io/gogs

  GO-2024-3355: Remote Command Execution in file editing in gogs in gogs.io/gogs

  GO-2024-3356: Path Traversal in file update API in gogs in gogs.io/gogs

Changes in this version

+ var Sanitizer = bluemonday.UGCPolicy()

+ func RenderCommitMessage(msg, urlPrefix string) template.HTML

Jan 5, 2015 GO-2022-0369 +21 more

  GO-2022-0369: Gogs vulnerable to improper PAM authorization handling in gogs.io/gogs

  GO-2022-0377: SSRF in repository migration in gogs.io/gogs

  GO-2022-0471: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0473: Cross site scripting via cookies in gogs in gogs.io/gogs

  GO-2022-0483: Cross-site Scripting vulnerability in repository issue list in Gogs in gogs.io/gogs

  GO-2022-0554: Unrestricted Upload of File with Dangerous Type in Gogs in gogs.io/gogs

  GO-2022-0556: OS Command Injection in file editor in Gogs in gogs.io/gogs

  GO-2022-0562: Path Traversal in Git HTTP endpoints in Gogs in gogs.io/gogs

  GO-2022-0566: SSRF in repository migration in gogs.io/gogs

  GO-2022-0570: Path Traversal in file editor on Windows in Gogs in gogs.io/gogs

  GO-2022-0583: Server-Side Request Forgery in gogs webhook in gogs.io/gogs

  GO-2022-0597: Cross-site Scripting in Gogs in gogs.io/gogs

  GO-2022-0749: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0788: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0797: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0822: Open Redirect in gogs.io/gogs

  GO-2023-1596: Gogs OS Command Injection vulnerability in gogs.io/gogs

  GO-2023-1971: Gogs and Gitea SSRF Vulnerability in code.gitea.io/gitea

  GO-2023-1972: Gogs XSS Vulnerability in gogs.io/gogs

  GO-2024-3275: Unpatched Remote Code Execution in Gogs in gogs.io/gogs

  GO-2024-3355: Remote Command Execution in file editing in gogs in gogs.io/gogs

  GO-2024-3356: Path Traversal in file update API in gogs in gogs.io/gogs

Dec 14, 2014 GO-2022-0369 +21 more

  GO-2022-0369: Gogs vulnerable to improper PAM authorization handling in gogs.io/gogs

  GO-2022-0377: SSRF in repository migration in gogs.io/gogs

  GO-2022-0471: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0473: Cross site scripting via cookies in gogs in gogs.io/gogs

  GO-2022-0483: Cross-site Scripting vulnerability in repository issue list in Gogs in gogs.io/gogs

  GO-2022-0554: Unrestricted Upload of File with Dangerous Type in Gogs in gogs.io/gogs

  GO-2022-0556: OS Command Injection in file editor in Gogs in gogs.io/gogs

  GO-2022-0562: Path Traversal in Git HTTP endpoints in Gogs in gogs.io/gogs

  GO-2022-0566: SSRF in repository migration in gogs.io/gogs

  GO-2022-0570: Path Traversal in file editor on Windows in Gogs in gogs.io/gogs

  GO-2022-0583: Server-Side Request Forgery in gogs webhook in gogs.io/gogs

  GO-2022-0597: Cross-site Scripting in Gogs in gogs.io/gogs

  GO-2022-0749: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0788: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0797: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0822: Open Redirect in gogs.io/gogs

  GO-2023-1596: Gogs OS Command Injection vulnerability in gogs.io/gogs

  GO-2023-1971: Gogs and Gitea SSRF Vulnerability in code.gitea.io/gitea

  GO-2023-1972: Gogs XSS Vulnerability in gogs.io/gogs

  GO-2024-3275: Unpatched Remote Code Execution in Gogs in gogs.io/gogs

  GO-2024-3355: Remote Command Execution in file editing in gogs in gogs.io/gogs

  GO-2024-3356: Path Traversal in file update API in gogs in gogs.io/gogs

Changes in this version

+ func DetectEncoding(content []byte) (string, error)

+ func RenderIssueIndexPattern(rawBytes []byte, urlPrefix string) []byte

+ func RenderSha1CurrentPattern(rawBytes []byte, urlPrefix string) []byte

Nov 19, 2014 GO-2022-0369 +21 more

  GO-2022-0369: Gogs vulnerable to improper PAM authorization handling in gogs.io/gogs

  GO-2022-0377: SSRF in repository migration in gogs.io/gogs

  GO-2022-0471: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0473: Cross site scripting via cookies in gogs in gogs.io/gogs

  GO-2022-0483: Cross-site Scripting vulnerability in repository issue list in Gogs in gogs.io/gogs

  GO-2022-0554: Unrestricted Upload of File with Dangerous Type in Gogs in gogs.io/gogs

  GO-2022-0556: OS Command Injection in file editor in Gogs in gogs.io/gogs

  GO-2022-0562: Path Traversal in Git HTTP endpoints in Gogs in gogs.io/gogs

  GO-2022-0566: SSRF in repository migration in gogs.io/gogs

  GO-2022-0570: Path Traversal in file editor on Windows in Gogs in gogs.io/gogs

  GO-2022-0583: Server-Side Request Forgery in gogs webhook in gogs.io/gogs

  GO-2022-0597: Cross-site Scripting in Gogs in gogs.io/gogs

  GO-2022-0749: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0788: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0797: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0822: Open Redirect in gogs.io/gogs

  GO-2023-1596: Gogs OS Command Injection vulnerability in gogs.io/gogs

  GO-2023-1971: Gogs and Gitea SSRF Vulnerability in code.gitea.io/gitea

  GO-2023-1972: Gogs XSS Vulnerability in gogs.io/gogs

  GO-2024-3275: Unpatched Remote Code Execution in Gogs in gogs.io/gogs

  GO-2024-3355: Remote Command Execution in file editing in gogs in gogs.io/gogs

  GO-2024-3356: Path Traversal in file update API in gogs in gogs.io/gogs

Changes in this version

+ const DOC_URL

+ func BasicAuthDecode(encoded string) (user string, name string, err error)

+ func BasicAuthEncode(username, password string) string

+ func EncodeSha1(str string) string

type CustomRender

+ func (options *CustomRender) Image(out *bytes.Buffer, link []byte, title []byte, alt []byte)

type PushCommits

+ CompareUrl string

Oct 10, 2014 GO-2022-0369 +23 more

  GO-2022-0369: Gogs vulnerable to improper PAM authorization handling in gogs.io/gogs

  GO-2022-0377: SSRF in repository migration in gogs.io/gogs

  GO-2022-0471: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0473: Cross site scripting via cookies in gogs in gogs.io/gogs

  GO-2022-0483: Cross-site Scripting vulnerability in repository issue list in Gogs in gogs.io/gogs

  GO-2022-0554: Unrestricted Upload of File with Dangerous Type in Gogs in gogs.io/gogs

  GO-2022-0556: OS Command Injection in file editor in Gogs in gogs.io/gogs

  GO-2022-0562: Path Traversal in Git HTTP endpoints in Gogs in gogs.io/gogs

  GO-2022-0566: SSRF in repository migration in gogs.io/gogs

  GO-2022-0570: Path Traversal in file editor on Windows in Gogs in gogs.io/gogs

  GO-2022-0583: Server-Side Request Forgery in gogs webhook in gogs.io/gogs

  GO-2022-0597: Cross-site Scripting in Gogs in gogs.io/gogs

  GO-2022-0642: Cross-site Scripting in Gogs in gogs.io/gogs

  GO-2022-0749: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0788: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0797: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0822: Open Redirect in gogs.io/gogs

  GO-2022-0831: SQL Injection in Gogs in gogs.io/gogs

  GO-2023-1596: Gogs OS Command Injection vulnerability in gogs.io/gogs

  GO-2023-1971: Gogs and Gitea SSRF Vulnerability in code.gitea.io/gitea

  GO-2023-1972: Gogs XSS Vulnerability in gogs.io/gogs

  GO-2024-3275: Unpatched Remote Code Execution in Gogs in gogs.io/gogs

  GO-2024-3355: Remote Command Execution in file editing in gogs in gogs.io/gogs

  GO-2024-3356: Path Traversal in file update API in gogs in gogs.io/gogs

Changes in this version

+ func XSS(in []byte) []byte

+ func XSSString(in string) string

Sep 18, 2014 GO-2022-0369 +23 more

  GO-2022-0369: Gogs vulnerable to improper PAM authorization handling in gogs.io/gogs

  GO-2022-0377: SSRF in repository migration in gogs.io/gogs

  GO-2022-0471: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0473: Cross site scripting via cookies in gogs in gogs.io/gogs

  GO-2022-0483: Cross-site Scripting vulnerability in repository issue list in Gogs in gogs.io/gogs

  GO-2022-0554: Unrestricted Upload of File with Dangerous Type in Gogs in gogs.io/gogs

  GO-2022-0556: OS Command Injection in file editor in Gogs in gogs.io/gogs

  GO-2022-0562: Path Traversal in Git HTTP endpoints in Gogs in gogs.io/gogs

  GO-2022-0566: SSRF in repository migration in gogs.io/gogs

  GO-2022-0570: Path Traversal in file editor on Windows in Gogs in gogs.io/gogs

  GO-2022-0583: Server-Side Request Forgery in gogs webhook in gogs.io/gogs

  GO-2022-0597: Cross-site Scripting in Gogs in gogs.io/gogs

  GO-2022-0642: Cross-site Scripting in Gogs in gogs.io/gogs

  GO-2022-0749: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0788: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0797: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0822: Open Redirect in gogs.io/gogs

  GO-2022-0831: SQL Injection in Gogs in gogs.io/gogs

  GO-2023-1596: Gogs OS Command Injection vulnerability in gogs.io/gogs

  GO-2023-1971: Gogs and Gitea SSRF Vulnerability in code.gitea.io/gitea

  GO-2023-1972: Gogs XSS Vulnerability in gogs.io/gogs

  GO-2024-3275: Unpatched Remote Code Execution in Gogs in gogs.io/gogs

  GO-2024-3355: Remote Command Execution in file editing in gogs in gogs.io/gogs

  GO-2024-3356: Path Traversal in file update API in gogs in gogs.io/gogs

Changes in this version

+ func ToUtf8(content string) string

+ func ToUtf8WithErr(content []byte) (error, string)

Sep 14, 2014 GO-2022-0369 +23 more

  GO-2022-0369: Gogs vulnerable to improper PAM authorization handling in gogs.io/gogs

  GO-2022-0377: SSRF in repository migration in gogs.io/gogs

  GO-2022-0471: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0473: Cross site scripting via cookies in gogs in gogs.io/gogs

  GO-2022-0483: Cross-site Scripting vulnerability in repository issue list in Gogs in gogs.io/gogs

  GO-2022-0554: Unrestricted Upload of File with Dangerous Type in Gogs in gogs.io/gogs

  GO-2022-0556: OS Command Injection in file editor in Gogs in gogs.io/gogs

  GO-2022-0562: Path Traversal in Git HTTP endpoints in Gogs in gogs.io/gogs

  GO-2022-0566: SSRF in repository migration in gogs.io/gogs

  GO-2022-0570: Path Traversal in file editor on Windows in Gogs in gogs.io/gogs

  GO-2022-0583: Server-Side Request Forgery in gogs webhook in gogs.io/gogs

  GO-2022-0597: Cross-site Scripting in Gogs in gogs.io/gogs

  GO-2022-0642: Cross-site Scripting in Gogs in gogs.io/gogs

  GO-2022-0749: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0788: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0797: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0822: Open Redirect in gogs.io/gogs

  GO-2022-0831: SQL Injection in Gogs in gogs.io/gogs

  GO-2023-1596: Gogs OS Command Injection vulnerability in gogs.io/gogs

  GO-2023-1971: Gogs and Gitea SSRF Vulnerability in code.gitea.io/gitea

  GO-2023-1972: Gogs XSS Vulnerability in gogs.io/gogs

  GO-2024-3275: Unpatched Remote Code Execution in Gogs in gogs.io/gogs

  GO-2024-3355: Remote Command Execution in file editing in gogs in gogs.io/gogs

  GO-2024-3356: Path Traversal in file update API in gogs in gogs.io/gogs

Changes in this version

type PushCommits

+ func ActionContent2Commits(act Actioner) *PushCommits

+ type TplName string

Jun 6, 2014 GO-2022-0369 +23 more

  GO-2022-0369: Gogs vulnerable to improper PAM authorization handling in gogs.io/gogs

  GO-2022-0377: SSRF in repository migration in gogs.io/gogs

  GO-2022-0471: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0473: Cross site scripting via cookies in gogs in gogs.io/gogs

  GO-2022-0483: Cross-site Scripting vulnerability in repository issue list in Gogs in gogs.io/gogs

  GO-2022-0554: Unrestricted Upload of File with Dangerous Type in Gogs in gogs.io/gogs

  GO-2022-0556: OS Command Injection in file editor in Gogs in gogs.io/gogs

  GO-2022-0562: Path Traversal in Git HTTP endpoints in Gogs in gogs.io/gogs

  GO-2022-0566: SSRF in repository migration in gogs.io/gogs

  GO-2022-0570: Path Traversal in file editor on Windows in Gogs in gogs.io/gogs

  GO-2022-0583: Server-Side Request Forgery in gogs webhook in gogs.io/gogs

  GO-2022-0597: Cross-site Scripting in Gogs in gogs.io/gogs

  GO-2022-0642: Cross-site Scripting in Gogs in gogs.io/gogs

  GO-2022-0749: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0788: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0797: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0822: Open Redirect in gogs.io/gogs

  GO-2022-0831: SQL Injection in Gogs in gogs.io/gogs

  GO-2023-1596: Gogs OS Command Injection vulnerability in gogs.io/gogs

  GO-2023-1971: Gogs and Gitea SSRF Vulnerability in code.gitea.io/gitea

  GO-2023-1972: Gogs XSS Vulnerability in gogs.io/gogs

  GO-2024-3275: Unpatched Remote Code Execution in Gogs in gogs.io/gogs

  GO-2024-3355: Remote Command Execution in file editing in gogs in gogs.io/gogs

  GO-2024-3356: Path Traversal in file update API in gogs in gogs.io/gogs

Jun 1, 2014 GO-2022-0369 +23 more

  GO-2022-0369: Gogs vulnerable to improper PAM authorization handling in gogs.io/gogs

  GO-2022-0377: SSRF in repository migration in gogs.io/gogs

  GO-2022-0471: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0473: Cross site scripting via cookies in gogs in gogs.io/gogs

  GO-2022-0483: Cross-site Scripting vulnerability in repository issue list in Gogs in gogs.io/gogs

  GO-2022-0554: Unrestricted Upload of File with Dangerous Type in Gogs in gogs.io/gogs

  GO-2022-0556: OS Command Injection in file editor in Gogs in gogs.io/gogs

  GO-2022-0562: Path Traversal in Git HTTP endpoints in Gogs in gogs.io/gogs

  GO-2022-0566: SSRF in repository migration in gogs.io/gogs

  GO-2022-0570: Path Traversal in file editor on Windows in Gogs in gogs.io/gogs

  GO-2022-0583: Server-Side Request Forgery in gogs webhook in gogs.io/gogs

  GO-2022-0597: Cross-site Scripting in Gogs in gogs.io/gogs

  GO-2022-0642: Cross-site Scripting in Gogs in gogs.io/gogs

  GO-2022-0749: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0788: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0797: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0822: Open Redirect in gogs.io/gogs

  GO-2022-0831: SQL Injection in Gogs in gogs.io/gogs

  GO-2023-1596: Gogs OS Command Injection vulnerability in gogs.io/gogs

  GO-2023-1971: Gogs and Gitea SSRF Vulnerability in code.gitea.io/gitea

  GO-2023-1972: Gogs XSS Vulnerability in gogs.io/gogs

  GO-2024-3275: Unpatched Remote Code Execution in Gogs in gogs.io/gogs

  GO-2024-3355: Remote Command Execution in file editing in gogs in gogs.io/gogs

  GO-2024-3356: Path Traversal in file update API in gogs in gogs.io/gogs

May 31, 2014 GO-2022-0369 +23 more

  GO-2022-0369: Gogs vulnerable to improper PAM authorization handling in gogs.io/gogs

  GO-2022-0377: SSRF in repository migration in gogs.io/gogs

  GO-2022-0471: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0473: Cross site scripting via cookies in gogs in gogs.io/gogs

  GO-2022-0483: Cross-site Scripting vulnerability in repository issue list in Gogs in gogs.io/gogs

  GO-2022-0554: Unrestricted Upload of File with Dangerous Type in Gogs in gogs.io/gogs

  GO-2022-0556: OS Command Injection in file editor in Gogs in gogs.io/gogs

  GO-2022-0562: Path Traversal in Git HTTP endpoints in Gogs in gogs.io/gogs

  GO-2022-0566: SSRF in repository migration in gogs.io/gogs

  GO-2022-0570: Path Traversal in file editor on Windows in Gogs in gogs.io/gogs

  GO-2022-0583: Server-Side Request Forgery in gogs webhook in gogs.io/gogs

  GO-2022-0597: Cross-site Scripting in Gogs in gogs.io/gogs

  GO-2022-0642: Cross-site Scripting in Gogs in gogs.io/gogs

  GO-2022-0749: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0788: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0797: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0822: Open Redirect in gogs.io/gogs

  GO-2022-0831: SQL Injection in Gogs in gogs.io/gogs

  GO-2023-1596: Gogs OS Command Injection vulnerability in gogs.io/gogs

  GO-2023-1971: Gogs and Gitea SSRF Vulnerability in code.gitea.io/gitea

  GO-2023-1972: Gogs XSS Vulnerability in gogs.io/gogs

  GO-2024-3275: Unpatched Remote Code Execution in Gogs in gogs.io/gogs

  GO-2024-3355: Remote Command Execution in file editing in gogs in gogs.io/gogs

  GO-2024-3356: Path Traversal in file update API in gogs in gogs.io/gogs

Changes in this version

+ const TPL_COMMENT_ISSUE

+ func Oauth2Name(t int) string

+ func RenderRawMarkdown(body []byte, urlPrefix string) []byte

type Actioner

+ GetRepoUserName func() string

+ type ApiJsonErr struct

+ DocUrl string

+ Message string

Apr 29, 2014 GO-2022-0369 +23 more

  GO-2022-0369: Gogs vulnerable to improper PAM authorization handling in gogs.io/gogs

  GO-2022-0377: SSRF in repository migration in gogs.io/gogs

  GO-2022-0471: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0473: Cross site scripting via cookies in gogs in gogs.io/gogs

  GO-2022-0483: Cross-site Scripting vulnerability in repository issue list in Gogs in gogs.io/gogs

  GO-2022-0554: Unrestricted Upload of File with Dangerous Type in Gogs in gogs.io/gogs

  GO-2022-0556: OS Command Injection in file editor in Gogs in gogs.io/gogs

  GO-2022-0562: Path Traversal in Git HTTP endpoints in Gogs in gogs.io/gogs

  GO-2022-0566: SSRF in repository migration in gogs.io/gogs

  GO-2022-0570: Path Traversal in file editor on Windows in Gogs in gogs.io/gogs

  GO-2022-0583: Server-Side Request Forgery in gogs webhook in gogs.io/gogs

  GO-2022-0597: Cross-site Scripting in Gogs in gogs.io/gogs

  GO-2022-0642: Cross-site Scripting in Gogs in gogs.io/gogs

  GO-2022-0749: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0788: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0797: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0822: Open Redirect in gogs.io/gogs

  GO-2022-0831: SQL Injection in Gogs in gogs.io/gogs

  GO-2023-1596: Gogs OS Command Injection vulnerability in gogs.io/gogs

  GO-2023-1971: Gogs and Gitea SSRF Vulnerability in code.gitea.io/gitea

  GO-2023-1972: Gogs XSS Vulnerability in gogs.io/gogs

  GO-2024-3275: Unpatched Remote Code Execution in Gogs in gogs.io/gogs

  GO-2024-3355: Remote Command Execution in file editing in gogs in gogs.io/gogs

  GO-2024-3356: Path Traversal in file update API in gogs in gogs.io/gogs

Changes in this version

+ var OfflineMode bool

+ var ProdMode bool

Apr 21, 2014 GO-2022-0369 +21 more

  GO-2022-0369: Gogs vulnerable to improper PAM authorization handling in gogs.io/gogs

  GO-2022-0377: SSRF in repository migration in gogs.io/gogs

  GO-2022-0471: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0473: Cross site scripting via cookies in gogs in gogs.io/gogs

  GO-2022-0483: Cross-site Scripting vulnerability in repository issue list in Gogs in gogs.io/gogs

  GO-2022-0554: Unrestricted Upload of File with Dangerous Type in Gogs in gogs.io/gogs

  GO-2022-0556: OS Command Injection in file editor in Gogs in gogs.io/gogs

  GO-2022-0562: Path Traversal in Git HTTP endpoints in Gogs in gogs.io/gogs

  GO-2022-0566: SSRF in repository migration in gogs.io/gogs

  GO-2022-0570: Path Traversal in file editor on Windows in Gogs in gogs.io/gogs

  GO-2022-0583: Server-Side Request Forgery in gogs webhook in gogs.io/gogs

  GO-2022-0597: Cross-site Scripting in Gogs in gogs.io/gogs

  GO-2022-0749: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0788: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0797: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0822: Open Redirect in gogs.io/gogs

  GO-2023-1596: Gogs OS Command Injection vulnerability in gogs.io/gogs

  GO-2023-1971: Gogs and Gitea SSRF Vulnerability in code.gitea.io/gitea

  GO-2023-1972: Gogs XSS Vulnerability in gogs.io/gogs

  GO-2024-3275: Unpatched Remote Code Execution in Gogs in gogs.io/gogs

  GO-2024-3355: Remote Command Execution in file editing in gogs in gogs.io/gogs

  GO-2024-3356: Path Traversal in file update API in gogs in gogs.io/gogs

Changes in this version

+ const BindingAlphaDashError

+ const BindingBooleanTypeError

+ const BindingDeserializationError

+ const BindingEmailError

+ const BindingFloatTypeError

+ const BindingIntegerTypeError

+ const BindingMaxSizeError

+ const BindingMinSizeError

+ const BindingRequireError

+ const BindingUrlError

+ const TPL_CREATE_ISSUE

+ const TPL_PUSH_TAG

+ const TPL_TRANSFER_REPO

+ var EnableMemcache bool

+ var EnableRedis bool

+ var GoGetMetas = make(map[string]bool)

+ var IsProdMode bool

+ var MentionPattern = regexp.MustCompile(`@[0-9a-zA-Z_]{1,}`)

+ var OauthService *Oauther

+ var ScriptType string

+ func NewBaseServices()

+ func Oauth2Icon(t int) string

+ func PBKDF2(password, salt []byte, iter, keyLen int, h func() hash.Hash) []byte

+ func RenderMarkdownString(raw, urlPrefix string) string

+ func RenderSpecialLink(rawBytes []byte, urlPrefix string) []byte

+ type BindingErrors struct

+ Fields map[string]string

+ Overall map[string]string

+ func (err BindingErrors) Count() int

+ func (this *BindingErrors) Combine(other BindingErrors)

+ type OauthInfo struct

+ AuthUrl string

+ ClientId string

+ ClientSecret string

+ Scopes string

+ TokenUrl string

+ type Oauther struct

+ GitHub bool

+ Google bool

+ OauthInfos map[string]*OauthInfo

+ Tencent bool

+ Twitter bool

+ Weibo bool

Mar 31, 2014 GO-2022-0369 +21 more

  GO-2022-0369: Gogs vulnerable to improper PAM authorization handling in gogs.io/gogs

  GO-2022-0377: SSRF in repository migration in gogs.io/gogs

  GO-2022-0471: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0473: Cross site scripting via cookies in gogs in gogs.io/gogs

  GO-2022-0483: Cross-site Scripting vulnerability in repository issue list in Gogs in gogs.io/gogs

  GO-2022-0554: Unrestricted Upload of File with Dangerous Type in Gogs in gogs.io/gogs

  GO-2022-0556: OS Command Injection in file editor in Gogs in gogs.io/gogs

  GO-2022-0562: Path Traversal in Git HTTP endpoints in Gogs in gogs.io/gogs

  GO-2022-0566: SSRF in repository migration in gogs.io/gogs

  GO-2022-0570: Path Traversal in file editor on Windows in Gogs in gogs.io/gogs

  GO-2022-0583: Server-Side Request Forgery in gogs webhook in gogs.io/gogs

  GO-2022-0597: Cross-site Scripting in Gogs in gogs.io/gogs

  GO-2022-0749: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0788: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0797: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0822: Open Redirect in gogs.io/gogs

  GO-2023-1596: Gogs OS Command Injection vulnerability in gogs.io/gogs

  GO-2023-1971: Gogs and Gitea SSRF Vulnerability in code.gitea.io/gitea

  GO-2023-1972: Gogs XSS Vulnerability in gogs.io/gogs

  GO-2024-3275: Unpatched Remote Code Execution in Gogs in gogs.io/gogs

  GO-2024-3355: Remote Command Execution in file editing in gogs in gogs.io/gogs

  GO-2024-3356: Path Traversal in file update API in gogs in gogs.io/gogs

Changes in this version

+ const Byte

+ const Day

+ const EByte

+ const GByte

+ const Hour

+ const KByte

+ const MByte

+ const Minute

+ const Month

+ const PByte

+ const TByte

+ const TPL_COMMIT_REPO

+ const TPL_COMMIT_REPO_LI

+ const TPL_CREATE_Issue

+ const TPL_CREATE_REPO

+ const TimeLimitCodeLength

+ const Week

+ const Year

+ var AppLogo string

+ var AppName string

+ var AppUrl string

+ var AppVer string

+ var Cache cache.Cache

+ var CacheAdapter string

+ var CacheConfig string

+ var Cfg *goconfig.ConfigFile

+ var CookieRememberName string

+ var CookieUserName string

+ var Domain string

+ var InstallLock bool

+ var LogConfig string

+ var LogInRememberDays int

+ var LogMode string

+ var MailService *Mailer

+ var PictureService string

+ var RepoRootPath string

+ var RunUser string

+ var SecretKey string

+ var Service struct

+ var SessionConfig *session.Config

+ var SessionManager *session.Manager

+ var SessionProvider string

+ var TemplateFuncs template.FuncMap = map[string]interface

+ func ActionDesc(act Actioner) string

+ func ActionIcon(opType int) string

+ func AvatarLink(email string) string

+ func CreateTimeLimitCode(data string, minutes int, startInf interface{}) string

+ func DateFormat(t time.Time, format string) string

+ func DateParse(dateString, format string) (time.Time, error)

+ func DiffLineTypeToStr(diffType int) string

+ func DiffTypeToStr(diffType int) string

+ func EncodeMd5(str string) string

+ func ExecDir() (string, error)

+ func FileSize(s int64) string

+ func GetRandomString(n int, alphabets ...byte) string

+ func IsImageFile(data []byte) (string, bool)

+ func IsMarkdownFile(name string) bool

+ func IsReadmeFile(name string) bool

+ func IsTextFile(data []byte) (string, bool)

+ func List(l *list.List) chan interface

+ func NewConfigContext()

+ func NewServices()

+ func Range(l int) []int

+ func RenderMarkdown(rawBytes []byte, urlPrefix string) []byte

+ func ShortSha(sha1 string) string

+ func Str2html(raw string) template.HTML

+ func Subtract(left interface{}, right interface{}) interface

+ func TimeSince(then time.Time) string

+ func TimeSincePro(then time.Time) string

+ func ToStr(value interface{}, args ...int) (s string)

+ func VerifyTimeLimitCode(data string, minutes int, code string) bool

+ type Actioner interface

+ GetActEmail func() string

+ GetActUserName func() string

+ GetBranch func() string

+ GetContent func() string

+ GetOpType func() int

+ GetRepoName func() string

+ type CustomRender struct

+ func (options *CustomRender) Link(out *bytes.Buffer, link []byte, title []byte, content []byte)

+ type Mailer struct

+ Host string

+ Name string

+ Passwd string

+ User string

+ type PushCommit struct

+ AuthorEmail string

+ AuthorName string

+ Message string

+ Sha1 string

+ type PushCommits struct

+ Commits []*PushCommit

+ Len int

+ type StrTo string

+ func (f StrTo) Exist() bool

+ func (f StrTo) Int() (int, error)

+ func (f StrTo) Int64() (int64, error)

+ func (f StrTo) String() string

+ type TmplData map[string]interface