gogs gogs/gogs

Name: gogs gogs/gogs
Brand: gogs

productEU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

public exploit

by severity

5critical2high3medium0low

updated 2026-10-28

vulnerabilities (10)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2022-2024US	critical9.8	97.8% (100th)	—	0.12.11	2023-02-25	unspecified → 0.12.11
CVE-2022-0415US	high8.8	65.9% (99th)	—	0.12.6	2022-03-21	unspecified → 0.12.6
CVE-2022-1993US	high8.1	36.3% (98th)	—	0.12.9	2022-06-09	unspecified → 0.12.9
CVE-2022-1986US	critical9.8	4.49% (91st)	—	0.12.9	2022-06-09	unspecified → 0.12.9
CVE-2022-0870US	medium5.3	3.42% (89th)	—	0.12.5	2022-03-11	unspecified → 0.12.5
CVE-2022-1992US	critical9.1	2.27% (83rd)	—	0.12.9	2022-06-09	unspecified → 0.12.9
CVE-2022-1884US	critical9.8	1.84% (79th)	—	no fix	2024-11-15	≤ unspecified ≤latest
CVE-2022-0871US	critical9.1OT elevated	1.24% (69th)	—	0.12.5	2022-03-11	unspecified → 0.12.5
CVE-2022-1285US	medium6.5	1.12% (66th)	—	0.12.8	2022-06-01	unspecified → 0.12.8
CVE-2022-1464US	medium5.4	0.72% (54th)	—	0.12.7	2022-05-05	unspecified → 0.12.7

The flaw types (CWEs) most of these CVEs share.

CWE-78Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')3 CVEs
CWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')2 CVEs
CWE-918Server-Side Request Forgery (SSRF)2 CVEs
CWE-20Improper Input Validation1 CVEs
CWE-434Unrestricted Upload of File with Dangerous Type1 CVEs
CWE-77Improper Neutralization of Special Elements used in a Command ('Command Injection')1 CVEs
CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')1 CVEs
CWE-862Missing Authorization1 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.