Firetruck

CVE-2025-8110

KEV
Updated Feb 26, 2026 · PUBLISHED
View KEV entry →

Description

Gogs contains a path traversal vulnerability affecting improper Symbolic link handling in the PutContents API that could allow for code execution.

Full record on cve.org →

Affected packages

PackageVendor / ProductVersion rangeStatus
GogsGogs / Gogs>= 0, <= 0.13.3affected