CVE-2024-55947: Gogs

High severity, CVSS 8.8. EPSS: 77.8% chance of exploitation in the next 30 days.

Gogs is an open source self-hosted Git service. A malicious user is able to write a file to an arbitrary path on the server to gain SSH access to the server. The vulnerability is fixed in 0.13.1.

Affected products

• Gogs Gogs: before 0.13.1 (fixed in 0.13.1)

Published 2024-12-23. Last modified 2026-06-17.