Gogs
0 remedies
cpe:2.3:a:gogs:gogs:*:*:*:*:*:*:*
0 remedies
Actively Exploited in the Wild
This vulnerability is being actively exploited in the wild.
Gogs Improper Symbolic Link Handling in PutContents API Leading to Local Code Execution
Vulnerability
Exploited
A vulnerability in Gogs has been identified, allowing for local code execution due to improper handling of symbolic links in the PutContents API. This issue arises from the way symbolic links are managed, potentially enabling malicious users to execute arbitrary code on the server.
Impact
Exploitation of this vulnerability allows for remote code execution on the affected system.
Added: Dec 10, 2025, 2:17 PM
Updated: Jan 12, 2026, 6:39 PM
Vulnerability Rating
Custom Algorithm
spread
3.1impact
10.0exploitability
5.5remediation
0.0relevance
1.3threat
8.3urgency
2.9incentive
1.7Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.