CVE-2018-16409: Gogs

High severity, CVSS 8.6. EPSS: 1.3% chance of exploitation in the next 30 days.

In Gogs 0.11.53, an attacker can use migrate to send arbitrary HTTP GET requests, leading to SSRF.

Affected products

• Gogs Gogs: version 0.11.53 only

Published 2018-09-03. Last modified 2026-06-17.