Open Source Gogs

Name: Open Source Gogs
Brand: Open Source

productDE

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

by severity

4critical6high6medium1low

updated 2026-10-27

vulnerabilities (46)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2025-8110US	high8.8OT critical	85.2% (100th)	KEV	no fix	2025-12-10	≤ 0.13.3
CVE-2026-52806US	—	7.93% (95th)	Exploit	0.14.3	2026-06-24	3 versions
CVE-2024-39930US	critical9.9	7.74% (95th)	Exploit	0.14.3	2024-07-04	< 0.14.3
CVE-2026-52813US	—	1.11% (66th)	Exploit	0.14.3	2026-06-24	< 0.14.3
CVE-2026-24135US	high8.1	0.96% (61st)	Exploit	0.13.4	2026-02-06	< 0.13.4
CVE-2026-25232US	high8.8OT high	0.48% (41st)	Exploit	0.14.1	2026-02-19	< 0.14.1
CVE-2026-52810US	—	0.43% (37th)	Exploit	0.14.3	2026-06-24	< 0.14.3
CVE-2024-39932US	critical9.9	16.3% (97th)	—	0.14.3	2024-07-04	< 0.14.3
CVE-2026-52815US	—	1.49% (74th)	—	0.14.3	2026-06-24	< 0.14.3
CVE-2024-56731US	critical9.8	1.15% (67th)	—	0.13.3	2025-06-24	< 0.13.3
CVE-2022-1285US	medium6.5	1.12% (66th)	—	0.14.3	2022-06-01	< 0.14.3
CVE-2026-25119US	—	0.86% (58th)	—	0.14.3	2026-06-24	< 0.14.3
CVE-2024-39933US	high7.7	0.69% (53rd)	—	0.14.3	2024-07-04	< 0.14.3
CVE-2026-25242US	critical9.8OT elevated	0.68% (52nd)	—	0.14.1	2026-02-19	< 0.14.1
CVE-2026-52816US	—	0.68% (52nd)	—	0.14.3	2026-06-24	< 0.14.3
CVE-2026-52801US	—	0.57% (47th)	—	0.14.3	2026-06-24	< 0.14.3
CVE-2026-52802US	—	0.55% (46th)	—	0.14.3	2026-06-24	< 0.14.3
CVE-2026-52814US	—	0.55% (46th)	—	0.14.3	2026-06-24	< 0.14.3
CVE-2026-26194US	high7.3	0.53% (45th)	—	0.14.3	2026-03-05	< 0.14.3
CVE-2026-52797US	—	0.53% (45th)	—	0.14.0	2026-06-24	< 0.14.0
CVE-2026-23633US	—	0.51% (43rd)	—	0.13.4	2026-02-06	< 0.13.4
CVE-2026-52804US	—	0.50% (43rd)	—	0.14.3	2026-06-24	< 0.14.3
CVE-2026-52807US	—	0.48% (41st)	—	0.14.3	2026-06-24	< 0.14.3
CVE-2026-52808US	—OT elevated	0.48% (41st)	—	0.14.3	2026-06-24	< 0.14.3
CVE-2025-64175US	high8.8	0.48% (41st)	—	0.13.4	2026-02-06	< 0.13.4
CVE-2026-52811US	—	0.47% (41st)	—	0.14.3	2026-06-24	< 0.14.3
CVE-2025-64719US	—	0.44% (38th)	—	0.14.3	2026-06-24	< 0.14.3
CVE-2026-52798US	—	0.43% (37th)	—	0.14.3	2026-06-24	< 0.14.3
CVE-2026-52799US	—OT elevated	0.42% (36th)	—	0.14.3	2026-06-24	< 0.14.3
CVE-2026-47267US	—	0.42% (36th)	—	0.14.3	2026-06-24	< 0.14.3
CVE-2025-47943US	—	0.39% (32nd)	—	0.13.3	2025-06-24	< 0.13.3
CVE-2026-52805US	—	0.38% (32nd)	—	0.14.3	2026-06-24	< 0.14.3
CVE-2026-22592US	—OT elevated	0.38% (32nd)	—	0.13.4	2026-02-06	< 0.13.4
CVE-2026-25921US	—OT elevated	0.35% (28th)	—	0.14.2	2026-03-05	< 0.14.2
CVE-2026-26022US	medium5.4	0.33% (25th)	—	0.14.2	2026-03-05	< 0.14.2
CVE-2026-23632US	—OT elevated	0.32% (24th)	—	0.13.4	2026-02-06	< 0.13.4
CVE-2026-25120US	low2.7	0.30% (23rd)	—	0.14.1	2026-02-19	< 0.14.1
CVE-2026-25229US	medium6.5	0.30% (22nd)	—	0.14.1	2026-02-19	< 0.14.1
CVE-2026-52796US	—	0.28% (21st)	—	0.14.3	2026-06-24	< 0.14.3
CVE-2026-52795US	—OT elevated	0.28% (20th)	—	0.14.3	2026-06-24	< 0.14.3
CVE-2026-26196US	medium5.3	0.27% (19th)	—	0.14.2	2026-03-05	< 0.14.2
CVE-2026-52800US	—	0.25% (16th)	—	0.14.3	2026-06-24	< 0.14.3
CVE-2026-52812US	—OT elevated	0.24% (15th)	—	0.14.3	2026-06-24	< 0.14.3
CVE-2026-52809US	—	0.20% (10th)	—	0.14.3	2026-06-24	< 0.14.3
CVE-2026-26195US	medium6.1	0.20% (10th)	—	0.14.2	2026-03-05	< 0.14.2
CVE-2026-26276US	medium5.4	0.19% (9th)	—	0.14.2	2026-03-05	< 0.14.2

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')7 CVEs
CWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')5 CVEs
CWE-862Missing Authorization5 CVEs
CWE-863Incorrect Authorization4 CVEs
CWE-639Authorization Bypass Through User-Controlled Key3 CVEs
CWE-88Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')3 CVEs
CWE-918Server-Side Request Forgery (SSRF)3 CVEs
CWE-20Improper Input Validation2 CVEs

sources (1)

Which sources assert this record, and when.

DECERT-Bund (BSI CSAF)46 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan