CVE-2026-23633
Gogs has arbitrary file read/write via path traversal in Git hook editing
Summary
Gogs has arbitrary file read/write via path traversal in Git hook editing
Original description
The description as published by the source.
Gogs is an open source self-hosted Git service. In version 0.13.3 and prior, there is an arbitrary file read/write via path traversal in Git hook editing. This issue has been patched in versions 0.13.4 and 0.14.0+dev.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
References
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov