CVE-2022-32174: Gogs

Critical severity, CVSS 9.0. EPSS: 58% chance of exploitation in the next 30 days.

In Gogs, versions v0.6.5 through v0.12.10 are vulnerable to Stored Cross-Site Scripting (XSS) that leads to an account takeover.

Affected products

• Gogs Gogs: from 0.6.5, up to and including 0.12.10

Published 2022-10-11. Last modified 2026-06-17.