PkgSeer

Vulnerabilities

Last updated 2 hours ago
Filters
Severity
Critical Severity
CVSS Score Range: 9.0–10.0
Critical severity vulnerabilities (CVSS 9.0–10.0). These represent the highest impact issues.
High Severity
CVSS Score Range: 7.0–8.9
High severity vulnerabilities (CVSS 7.0–8.9). Serious vulnerabilities that should be prioritized soon after critical fixes.
Medium Severity
CVSS Score Range: 4.0–6.9
Medium severity vulnerabilities (CVSS 4.0–6.9). Important issues that meaningfully reduce security confidence.
Low Severity
CVSS Score Range: < 4.0
Low severity vulnerabilities (CVSS < 4.0). Hygiene issues that can accumulate but pose lower immediate risk.
Unknown Severity
CVSS Score Range: No score
Vulnerabilities without an assigned CVSS score. Severity is not determinable from available data.
Package Summary Severity Published Modified
gogs.io/gogs Gogs allows users to write to readonly repositories using receive-pack + service=git-upload-pack confusion High Risk 8.0 4 months ago 11 hours ago
gogs.io/gogs Gogs allows users to write to readonly repositories using receive-pack + service=git-upload-pack confusion in gogs.io/gogs Unknown 4 months ago 11 hours ago
gogs.io/gogs Path Traversal in file update API in gogs High Risk 8.8 1 year ago 1 month ago
gogs.io/gogs Gogs XSS allowed by stored call in PDF renderer Medium Risk 6.3 1 year ago 1 month ago
gogs.io/gogs Gogs's write-level collaborators can mutate admin-only repository settings via API High Risk 7.1 4 months ago 3 months ago
gogs.io/gogs Gogs: LFS dedupe path leaks private repo content across tenants High Risk 8.0 4 months ago 3 months ago
gogs.io/gogs Gogs Vulnerable to Unauthenticated Organization Teams Information Disclosure via API Medium Risk 6.0 4 months ago 3 months ago
gogs.io/gogs Gogs: UploadRepoFiles writes outside repo working tree via committed parent sym Critical 9.5 4 months ago 3 months ago
gogs.io/gogs Gogs has Path Traversal in organization name that results in RCE through Git hooks Critical 10.0 4 months ago 3 months ago
gogs.io/gogs Gogs has a Migration Redirect Bypass that Leads to Internal Repository Theft High Risk 8.7 4 months ago 3 months ago
gogs.io/gogs Gogs Missing Authorization in Attachment Download High Risk 7.5 4 months ago 3 months ago
gogs.io/gogs Gogs Vulnerable to CSRF Leading to Organization Owner Takeover High Risk 8.8 4 months ago 3 months ago
gogs.io/gogs Gogs vulnerable to RCE via git rebase --exec argument injection in pull request merge Critical 9.9 4 months ago 3 months ago
gogs.io/gogs Gogs has DOM-based XSS via Milestone Name on New Issue Page Medium Risk 6.0 4 months ago 3 months ago
gogs.io/gogs Gogs has the ability to import local repositories via Mirror Settings High Risk 8.1 4 months ago 3 months ago
gogs.io/gogs Gogs has Unauthenticated Asymmetric Denial of Service (DoS) via SSH Handshake Stall (File Descriptor Exhaustion) Medium Risk 6.0 4 months ago 3 months ago
gogs.io/gogs Gogs has an Open Redirect via redirect_to Medium Risk 5.4 4 months ago 3 months ago
gogs.io/gogs Gogs has an Authentication Bypass via Unvalidated Reverse Proxy Headers High Risk 8.0 4 months ago 3 months ago
gogs.io/gogs Gogs has a Denial of Service in repository/wiki file listing web pages Medium Risk 4.9 4 months ago 3 months ago
gogs.io/gogs Gogs's Unauthenticated Jupyter Notebook (ipynb) Sanitizer allows arbitrary data: URIs leading to XSS Medium Risk 6.0 4 months ago 3 months ago
gogs.io/gogs Gogs Vulnerable to Privilege Escalation via Collaboration Access Mode Validation Medium Risk 6.0 4 months ago 3 months ago
gogs.io/gogs Gogs has DoS in rendering issue index pattern Low Risk 3.5 4 months ago 3 months ago
gogs.io/gogs Gogs's password-reset tokens use account-activation lifetime, ignoring RESET_PASSWORD_CODE_LIVES Medium Risk 6.8 4 months ago 3 months ago
gogs.io/gogs Gogs has SSRF in webhook deliveries High Risk 8.3 4 months ago 3 months ago
gogs.io/gogs Gogs has Stored XSS in `.ipynb` Preview High Risk 8.9 4 months ago 3 months ago
gogs.io/gogs Gogs: Overwriting critical files results in a denial of service High Risk 8.5 4 months ago 3 months ago
gogs.io/gogs OS Command Injection in gogs Critical 9.5 4 years ago 4 months ago
gogs.io/gogs Gogs has Unauthenticated Asymmetric Denial of Service (DoS) via SSH Handshake Stall (File Descriptor Exhaustion) in gogs.io/gogs Unknown 4 months ago 4 months ago
gogs.io/gogs Gogs vulnerable to RCE via git rebase --exec argument injection in pull request merge in gogs.io/gogs Unknown 4 months ago 4 months ago
gogs.io/gogs Gogs Vulnerable to CSRF Leading to Organization Owner Takeover in gogs.io/gogs Unknown 4 months ago 4 months ago
gogs.io/gogs Gogs has the ability to import local repositories via Mirror Settings in gogs.io/gogs Unknown 4 months ago 4 months ago
gogs.io/gogs Gogs has an Authentication Bypass via Unvalidated Reverse Proxy Headers in gogs.io/gogs Unknown 4 months ago 4 months ago
gogs.io/gogs Gogs has DOM-based XSS via Milestone Name on New Issue Page in gogs.io/gogs Unknown 4 months ago 4 months ago
gogs.io/gogs Gogs Missing Authorization in Attachment Download in gogs.io/gogs Unknown 4 months ago 4 months ago
gogs.io/gogs Gogs: Overwriting critical files results in a denial of service in gogs.io/gogs Unknown 4 months ago 4 months ago
gogs.io/gogs Gogs has Stored XSS in `.ipynb` Preview in gogs.io/gogs Unknown 4 months ago 4 months ago
gogs.io/gogs Gogs has an Open Redirect via redirect_to in gogs.io/gogs Unknown 4 months ago 4 months ago
gogs.io/gogs Gogs's write-level collaborators can mutate admin-only repository settings via API in gogs.io/gogs Unknown 4 months ago 4 months ago
gogs.io/gogs Gogs: XSS in .ipynb files renderer due to outdated notebookjs High Risk 8.0 4 months ago 4 months ago
gogs.io/gogs Gogs has a Migration Redirect Bypass that Leads to Internal Repository Theft in gogs.io/gogs Unknown 4 months ago 4 months ago
gogs.io/gogs Gogs has Path Traversal in organization name that results in RCE through Git hooks in gogs.io/gogs Unknown 4 months ago 4 months ago
gogs.io/gogs Gogs: UploadRepoFiles writes outside repo working tree via committed parent sym in gogs.io/gogs Unknown 4 months ago 4 months ago
gogs.io/gogs Gogs has SSRF in webhook deliveries in gogs.io/gogs Unknown 4 months ago 4 months ago
gogs.io/gogs Gogs Vulnerable to Unauthenticated Organization Teams Information Disclosure via API in gogs.io/gogs Unknown 4 months ago 4 months ago
gogs.io/gogs Gogs: LFS dedupe path leaks private repo content across tenants in gogs.io/gogs Unknown 4 months ago 4 months ago
gogs.io/gogs Gogs: XSS in .ipynb files renderer due to outdated notebookjs in gogs.io/gogs Unknown 4 months ago 4 months ago
gogs.io/gogs Gogs's password-reset tokens use account-activation lifetime, ignoring RESET_PASSWORD_CODE_LIVES in gogs.io/gogs Unknown 4 months ago 4 months ago
gogs.io/gogs Gogs has DoS in rendering issue index pattern in gogs.io/gogs Unknown 4 months ago 4 months ago
gogs.io/gogs Gogs's Unauthenticated Jupyter Notebook (ipynb) Sanitizer allows arbitrary data: URIs leading to XSS in gogs.io/gogs Unknown 4 months ago 4 months ago
gogs.io/gogs Gogs Vulnerable to Privilege Escalation via Collaboration Access Mode Validation in gogs.io/gogs Unknown 4 months ago 4 months ago
Data courtesy of OSV.dev
Page 1