CVE-2026-23633 — Gogs has arbitrary file read/write via path traversal in Git hook editing
Gogs is an open source self-hosted Git service. In version 0.13.3 and prior, there is an arbitrary file read/write via path traversal in Git hook editing. This issue has been pa…
Published: 2026-02-06 · CVSS: 6.5 · CVSS 3.1
Gogs is an open source self-hosted Git service. In version 0.13.3 and prior, there is an arbitrary file read/write via path traversal in Git hook editing. This issue has been patched in versions 0.13.4 and 0.14.0+dev.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7