VulertSecurity VulertSecurity

Vulnerability Database · Go · Package report

gogs.io/gogs: vulnerability history, versions and safety

gogs.io/gogs is a package in the Go ecosystem. Vulert records 145 vulnerabilities for it across 120 releases, from May 2021 to Jun 2026. Each vulnerability names the versions it affects, the fixed version to move to, and a workaround where no fix has been published.

i
145 vulnerabilities recorded C17 H31 M26 L2 U69
i
51 with no fix published

No patched version yet — these are the ones to plan around.

See the unfixed vulnerabilities →
i
86 in the last 12 months

Most recent disclosure 25 Jun 2026.

See the disclosure history →
i
0 malicious-package vulnerabilities

No published version shipped hostile code.

See all gogs.io/gogs vulnerabilities

Vulert verdict on gogs.io/gogs v0.13.3 i

Updated on 23 Oct 2026

Careful: v0.13.3 has 136 known vulnerabilities, and 48 have no fix yet. Use an earlier safe version, or the workaround listed for each one.

Package health score 50/100
  • Security Unfixed issues
  • Maintenance Maintaining
  • Popularity Key ecosystem project
  • Community Moderate

The current release has a vulnerability with no published fix, which caps this score.

What to do: Pin an earlier, unaffected release if you can, and apply the workaround each vulnerability lists until a fix is published. No fix yet: Vulert alerts you the moment one is published. Monitor it with Vulert →

  • Current release v0.13.3 — affected i
  • Vulnerabilities on record 145 over 5 years · 86 in the last year i
  • Latest disclosure 25 Jun 2026 i
  • Highest CVSS 10.0 i
  • With no published fix 51 i
  • Stars 47,899 i
  • OpenSSF scorecard 5/10 i
  • Last release 16 months ago i
  • Licence MIT i

Version list, release dates, licence and dependants published by the Go module proxy, refreshed 22 Oct 2026. Licence information is not legal advice.

Concerned about your application's security?

Vulert continues monitoring your dependencies and alerts you when new vulnerabilities are disclosed. No installation and no source-code access required.

01 Versions

Which versions are affected

Every version Vulert tracks for gogs.io/gogs, newest first, with the vulnerabilities recorded against each one. A version showing none has no vulnerability in the Vulert database — open it for the full picture on that release.

i
Version Released Vulert vulnerabilities Licence Fix published Details
v0.0.0-20251003031006-89f0f86c7e1a 03 Oct 2025 C16 H29 M24 L2 U65 MIT No Details →
v0.11.92-0.20251003031006-89f0f86c7e1a 03 Oct 2025 C16 H29 M24 L2 U65 MIT No Details →
v0.0.0-20250903002015-35c047dc9d0d 03 Sep 2025 C16 H29 M24 L2 U65 MIT No Details →
v0.11.92-0.20250903002015-35c047dc9d0d 03 Sep 2025 C16 H29 M24 L2 U65 MIT No Details →
v0.11.92-0.20250804015602-37962fcc0bc4 04 Aug 2025 C16 H29 M24 L2 U65 MIT No Details →
v0.11.92-0.20250618134651-d940e692ec58 18 Jun 2025 C16 H29 M24 L2 U65 MIT No Details →
v0.13.3 08 Jun 2025 C16 H29 M24 L2 U65 MIT No Details →
v0.13.3-rc.1 08 Jun 2025 C16 H29 M24 L2 U65 MIT No Details →
v0.11.92-0.20250608225303-f004b5b47206 08 Jun 2025 C16 H29 M24 L2 U65 MIT No Details →
v0.13.3-0.20250608224704-1cba9bc81b6f 08 Jun 2025 C16 H29 M24 L2 U65 MIT No Details →
v0.13.3-0.20250608224432-110117b2e5e5 08 Jun 2025 C16 H29 M24 L2 U65 MIT No Details →
v0.0.0-20250608222828-591810e405dd 08 Jun 2025 C16 H29 M24 L2 U65 MIT No Details →
v0.11.92-0.20250416124837-54cd8fd160c1 16 Apr 2025 C16 H29 M24 L2 U65 MIT No Details →
v0.11.92-0.20250305042710-4acaaac85aca 05 Mar 2025 C16 H29 M24 L2 U65 MIT No Details →
v0.11.92-0.20241223182607-d8f562b6ad29 23 Dec 2024 C16 H29 M24 L2 U65 MIT No Details →
v0.13.2 23 Dec 2024 C16 H29 M24 L2 U65 MIT No Details →
v0.13.2-rc.1 23 Dec 2024 C16 H29 M24 L2 U65 MIT No Details →
v0.11.92-0.20241223155657-cfde357824d0 23 Dec 2024 C16 H29 M24 L2 U65 MIT No Details →
v0.13.1 22 Dec 2024 C16 H29 M24 L2 U65 MIT No Details →
v0.13.1-rc.1 22 Dec 2024 C16 H29 M24 L2 U65 MIT No Details →
v0.11.92-0.20241222225059-e1042e7d4717 22 Dec 2024 C16 H29 M24 L2 U65 MIT No Details →
v0.13.1-0.20241222221611-2b0f129a9121 22 Dec 2024 C16 H29 M24 L2 U65 MIT No Details →
v0.13.1-0.20241222221508-ce51a8e53881 22 Dec 2024 C16 H29 M24 L2 U65 MIT No Details →
v0.13.1-0.20241222221444-3b527a36c8b4 22 Dec 2024 C16 H29 M24 L2 U65 MIT No Details →
v0.13.1-0.20241222220403-f5262441a0d7 22 Dec 2024 C16 H29 M24 L2 U65 MIT No Details →
v0.13.1-0.20241222215501-c947affcfac9 22 Dec 2024 C16 H29 M24 L2 U65 MIT No Details →
v0.13.1-0.20241222215418-40cb106198d4 22 Dec 2024 C16 H29 M24 L2 U65 MIT No Details →
v0.11.92-0.20241222213751-76831d0d06c4 22 Dec 2024 C16 H29 M24 L2 U65 MIT No Details →
v0.0.0-20241222202418-77a4a945ae9a 22 Dec 2024 C16 H29 M24 L2 U65 MIT No Details →
v0.11.92-0.20241222202418-77a4a945ae9a 22 Dec 2024 C16 H29 M24 L2 U65 MIT No Details →
v0.11.92-0.20241222195631-009a1855aa19 22 Dec 2024 C16 H29 M24 L2 U65 MIT No Details →
v0.11.92-0.20241215023034-9a9388ace25b 15 Dec 2024 C16 H29 M24 L2 U65 MIT No Details →
v0.11.92-0.20241209021255-c94baec9ca92 09 Dec 2024 C16 H29 M24 L2 U65 MIT No Details →
v0.11.92-0.20241201160842-25a799ad6355 01 Dec 2024 C16 H29 M24 L2 U65 MIT No Details →
v0.11.92-0.20241201154939-58fa30c7bebd 01 Dec 2024 C16 H29 M24 L2 U65 MIT No Details →
v0.11.92-0.20241110005001-7a2dffa95ac6 10 Nov 2024 C16 H29 M24 L2 U65 MIT No Details →
v0.11.92-0.20241014002438-07380780c6a1 14 Oct 2024 C16 H29 M24 L2 U65 MIT No Details →
v0.11.92-0.20241003015208-3a8bd73901ad 03 Oct 2024 C16 H29 M24 L2 U65 MIT No Details →
v0.11.92-0.20240913021002-e34ebac45901 13 Sep 2024 C16 H29 M24 L2 U65 MIT No Details →
v0.11.92-0.20240908161225-03d26b0482c3 08 Sep 2024 C16 H29 M24 L2 U65 MIT No Details →
v0.11.92-0.20240907154329-e6d4db0b4c0a 07 Sep 2024 C16 H29 M24 L2 U65 MIT No Details →
v0.11.92-0.20240904124626-69d74485f063 04 Sep 2024 C16 H29 M24 L2 U65 MIT No Details →
v0.11.92-0.20240903133600-9108970e45cb 03 Sep 2024 C16 H29 M24 L2 U65 MIT No Details →
v0.11.92-0.20240802051446-0965db473f35 02 Aug 2024 C16 H29 M24 L2 U65 MIT No Details →
v0.11.92-0.20240701111904-5bdf91e73c77 01 Jul 2024 C16 H29 M24 L2 U65 MIT No Details →
v0.11.92-0.20240629031741-f2ff885f33cb 29 Jun 2024 C16 H29 M24 L2 U65 MIT No Details →
v0.11.92-0.20240608165700-f4a78e5cfbd6 08 Jun 2024 C16 H29 M24 L2 U65 MIT No Details →
v0.11.92-0.20240526220454-87f47166ac7f 26 May 2024 C16 H29 M24 L2 U65 MIT No Details →
v0.11.92-0.20240502232633-c8cd3e712519 02 May 2024 C16 H29 M24 L2 U65 MIT No Details →
v0.11.92-0.20240430131534-6f9b63517db7 30 Apr 2024 C16 H29 M24 L2 U65 MIT No Details →
v0.11.92-0.20240427172220-1eae0b2fce22 27 Apr 2024 C16 H29 M24 L2 U65 MIT No Details →
v0.11.92-0.20240419235617-24f06bb0883c 19 Apr 2024 C16 H29 M24 L2 U65 MIT No Details →
v0.11.92-0.20240415143654-015589cdd9ff 15 Apr 2024 C16 H29 M24 L2 U65 MIT No Details →
v0.11.92-0.20240411141346-ba17b9b56bfe 11 Apr 2024 C16 H29 M24 L2 U65 MIT No Details →
v0.11.92-0.20240318004413-b89f20e02d35 18 Mar 2024 C16 H29 M24 L2 U65 MIT No Details →
v0.11.92-0.20240317003212-3a5132b6f79b 17 Mar 2024 C16 H29 M24 L2 U65 MIT No Details →
v0.11.92-0.20240314020302-6d77d6204d8b 14 Mar 2024 C16 H29 M24 L2 U65 MIT No Details →
v0.11.92-0.20240301181435-6c63a88ef07b 01 Mar 2024 C16 H29 M24 L2 U65 MIT No Details →
v0.11.92-0.20240221024732-8054ffc12f22 21 Feb 2024 C16 H29 M24 L2 U65 MIT No Details →
v0.11.92-0.20240202230538-077141d2ba2a 02 Feb 2024 C16 H29 M24 L2 U65 MIT No Details →
v0.11.92-0.20240101185132-7b06bf642a04 01 Jan 2024 C16 H29 M24 L2 U65 MIT No Details →
v0.11.92-0.20231225035910-5e96f64b8387 25 Dec 2023 C16 H29 M24 L2 U65 MIT No Details →
v0.11.92-0.20231217214937-41d473e99903 17 Dec 2023 C16 H29 M24 L2 U65 MIT No Details →
v0.11.92-0.20231118002020-1c711bc8d44a 18 Nov 2023 C16 H29 M24 L2 U65 MIT No Details →
v0.11.92-0.20231102030624-16b185f97dfc 02 Nov 2023 C16 H29 M24 L2 U65 MIT No Details →
v0.11.92-0.20231021002653-5c3fde8531c3 21 Oct 2023 C16 H29 M24 L2 U65 MIT No Details →
v0.11.92-0.20231003025135-33507405630f 03 Oct 2023 C16 H29 M24 L2 U65 MIT No Details →
v0.11.92-0.20230620232455-69802f07b7a5 20 Jun 2023 C16 H29 M24 L2 U65 MIT No Details →
v0.11.92-0.20230225123319-8c21874c00b6 25 Feb 2023 C16 H29 M24 L2 U65 MIT No Details →
v0.13.0-rc.1 25 Feb 2023 C16 H29 M24 L2 U65 MIT No Details →
v0.11.92-0.20230225123104-540134d4436d 25 Feb 2023 C16 H29 M24 L2 U65 MIT No Details →
v0.13.0 25 Feb 2023 C16 H29 M24 L2 U65 MIT No Details →
v0.12.11 25 Feb 2023 C16 H29 M24 L2 U65 MIT No Details →
v0.12.11-0.20230225053954-c9fba3cb30af 25 Feb 2023 C16 H29 M24 L2 U65 MIT No Details →
v0.12.11-rc.1 25 Feb 2023 C16 H29 M24 L2 U65 MIT No Details →
v0.11.92-0.20230225053906-73ae88badfff 25 Feb 2023 C16 H29 M24 L2 U65 MIT No Details →
v0.12.11-0.20230225050231-b1576d5a1fc7 25 Feb 2023 C16 H29 M24 L2 U65 MIT No Details →
v0.11.92-0.20230218141513-15d0d6a94be0 18 Feb 2023 C16 H29 M24 L2 U65 MIT No Details →
v0.11.92-0.20230118020730-63117f46ee5f 18 Jan 2023 C16 H29 M24 L2 U65 MIT No Details →
v0.11.92-0.20221208152052-c53b7e969852 08 Dec 2022 C16 H29 M24 L2 U65 MIT No Details →
v0.11.92-0.20221031143128-3af5a424f0e1 31 Oct 2022 C16 H29 M24 L2 U65 MIT No Details →
v0.11.92-0.20220802072447-cfa5ddbde82f 02 Aug 2022 C16 H29 M24 L2 U65 MIT No Details →
v0.12.10 02 Aug 2022 C16 H29 M24 L2 U65 MIT No Details →
v0.12.10-0.20220802030104-1ce5171ae170 02 Aug 2022 C16 H29 M24 L2 U65 MIT No Details →
v0.12.10-rc.1 02 Aug 2022 C16 H29 M24 L2 U65 MIT No Details →
v0.11.92-0.20220627123016-1cd501b107f2 27 Jun 2022 C16 H29 M24 L2 U65 MIT No Details →
v0.11.92-0.20220626030933-a8e43f63a148 26 Jun 2022 C16 H29 M24 L2 U65 MIT No Details →
v0.11.92-0.20220625131755-fb52bd6fea32 25 Jun 2022 C16 H29 M24 L2 U65 MIT No Details →
v0.11.92-0.20220625123605-97ccb365ecc8 25 Jun 2022 C16 H29 M24 L2 U65 MIT No Details →
v0.11.92-0.20220625100739-083c3ee659c6 25 Jun 2022 C16 H29 M24 L2 U65 MIT No Details →
v0.11.92-0.20220620122659-9df4e3ae3c55 20 Jun 2022 C16 H29 M24 L2 U65 MIT No Details →
v0.11.92-0.20220614074711-4a3dc6c774c9 14 Jun 2022 C16 H29 M24 L2 U65 MIT No Details →
v0.11.92-0.20220613114213-c0db4a7f1b3d 13 Jun 2022 C16 H29 M24 L2 U65 MIT No Details →
v0.11.92-0.20220612061501-b772603d78cb 12 Jun 2022 C16 H29 M24 L2 U65 MIT No Details →
v0.11.92-0.20220612023412-2e19f5a3c819 12 Jun 2022 C16 H29 M24 L2 U65 MIT No Details →
v0.11.92-0.20220611093530-63cb76106afb 11 Jun 2022 C16 H29 M24 L2 U65 MIT No Details →
v0.11.92-0.20220611044356-1df62fafb99c 11 Jun 2022 C16 H29 M24 L2 U65 MIT No Details →
v0.11.92-0.20220611035411-5e32058c13f3 11 Jun 2022 C16 H29 M24 L2 U65 MIT No Details →
v0.11.92-0.20220611031025-75fbb8244086 11 Jun 2022 C16 H29 M24 L2 U65 MIT No Details →
v0.11.92-0.20220611014217-f837ea6346ac 11 Jun 2022 C16 H29 M24 L2 U65 MIT No Details →
v0.11.92-0.20220610115436-9776bdc9b8b4 10 Jun 2022 C16 H29 M24 L2 U65 — No Details →
v0.11.92-0.20220610032706-94059f291dc8 10 Jun 2022 C16 H29 M24 L2 U65 — No Details →
v0.11.92-0.20220609014803-318fb2576178 09 Jun 2022 C16 H29 M24 L2 U65 — No Details →
v0.11.92-0.20220608113017-577621d463cb 08 Jun 2022 C16 H29 M24 L2 U65 — No Details →
v0.11.92-0.20220608064715-0918d8758b74 08 Jun 2022 C16 H29 M24 L2 U65 — No Details →
v0.11.92-0.20220608053410-fe1d07f29caf 08 Jun 2022 C16 H29 M24 L2 U65 — No Details →
v0.11.92-0.20220608005109-390fd3d2838b 08 Jun 2022 C16 H29 M24 L2 U65 — No Details →
v0.11.92-0.20220607173237-83045747382c 07 Jun 2022 C16 H29 M24 L2 U65 — No Details →
v0.11.92-0.20220607153433-727d4dbbe049 07 Jun 2022 C16 H29 M24 L2 U65 — No Details →
v0.11.92-0.20220607133042-d6c6b901f01e 07 Jun 2022 C16 H29 M24 L2 U65 — No Details →
v0.12.9 07 Jun 2022 C16 H29 M24 L2 U65 — No Details →
v0.12.9-0.20220607132932-012a1ba19ed2 07 Jun 2022 C16 H29 M24 L2 U65 — No Details →
v0.12.9-rc.1 07 Jun 2022 C16 H29 M24 L2 U65 — No Details →
v0.11.92-0.20220607131136-9bf748b6c4c9 07 Jun 2022 C16 H29 M24 L2 U65 — No Details →
v0.11.92-0.20220607123446-2ca014250fbf 07 Jun 2022 C16 H29 M24 L2 U65 — No Details →
v0.11.92-0.20220606145118-325904ce5a85 06 Jun 2022 C16 H29 M24 L2 U65 — No Details →
v0.11.92-0.20220605100859-4cc3000b07ed 05 Jun 2022 C16 H29 M24 L2 U65 — No Details →
v0.11.92-0.20220605053421-a328e7ccc4f9 05 Jun 2022 C16 H29 M24 L2 U65 — No Details →
v0.11.92-0.20220604165315-155cae1de891 04 Jun 2022 C16 H29 M24 L2 U65 — No Details →
v0.11.92-0.20220604064021-64e09476c799 04 Jun 2022 C16 H29 M24 L2 U65 — No Details →

The newest 120 of 332 versions Vulert tracks. Severity counts are the vulnerabilities recorded against that exact release.

02 Disclosure history

How often vulnerabilities are recorded

  • 2021 6
  • 2022 17
  • 2023 2
  • 2024 29
  • 2025 7
  • 2026 84

Counted by the year Vulert recorded each vulnerability — the same date the table below shows as disclosed. 86 of the 145 were recorded in the last 12 months.

03 Vulnerabilities

Recorded vulnerabilities for gogs.io/gogs

The 5 most severe of 145 vulnerabilities recorded for this package

Search all 145 in the database →
Vulnerability Severity Fixed version ↑ Disclosed ↑
CVE-2026-52813: Gogs Path Traversal Vulnerability Leading to Remote Code Execution 10.0 critical 0.14.3 23 Jun 2026
CVE-2024-56731: Gogs Critical Vulnerability Allows Remote Command Execution via .git Directory Manipulation 10.0 critical 0.13.3 24 Jun 2025
CVE-2022-1884: OS Command Injection in gogs 10.0 critical 0.12.8 02 Jun 2022
CVE-2026-52806: Gogs Remote Code Execution via Git Rebase Argument Injection 9.9 critical 0.14.3 23 Jun 2026
CVE-2024-39932: Gogs Arbitrary File Write Vulnerability 9.9 critical 0.13.1 23 Dec 2024

Vulnerability wrong, a fix missing, or a package we should cover? Report it and we will fix the record. Report Vulnerability Provide Feedback

Updated: 23/Oct/2026 · Vulnerabilities in our DB: 524315

Subscribe to Vulert on Telegram
Daily digest of new CVEs, critical and high severity, affected packages and fixes — plus a weekly roundup.
Join the channel →

Questions

About gogs.io/gogs

Is gogs.io/gogs safe to use?

Vulert records 145 vulnerabilities for gogs.io/gogs in Go: 17 critical, 31 high, 26 medium and 2 low, plus 69 not yet rated. 51 of them have no published fix yet, so those are the ones to avoid or mitigate.

What is gogs.io/gogs's Vulert package health score?

Vulert scores gogs.io/gogs 50/100, which reads as usable, but worth attention. The score weighs the vulnerability record (40), maintenance and release cadence (25), adoption from dependents and stars (20) and community signals such as the OpenSSF scorecard and forks (15). The current release has a vulnerability with no published fix, which caps this score.

Is the latest version of gogs.io/gogs affected?

Yes. v0.13.3, the version you would install today, has 136 known vulnerabilities, and 48 has no published fix yet. Use an earlier unaffected release, or the workaround each vulnerability lists.

How many vulnerabilities does gogs.io/gogs have?

145 vulnerabilities are recorded for gogs.io/gogs in the Go ecosystem: 17 critical, 31 high, 26 medium and 2 low, plus 69 not yet rated. The ledger on this page lists the same counts next to the date of the most recent disclosure.

How often are new gogs.io/gogs vulnerabilities disclosed?

86 vulnerabilities were recorded for gogs.io/gogs in the last 12 months, and the oldest entry in this database dates to 18 May 2021. Recency matters more than a lifetime total: it shows how actively new issues are being disclosed for the package you are considering.

Which versions of gogs.io/gogs are affected?

Each vulnerability on this page lists the affected version range and the fixed version to move to. Open the vulnerability for the version you actually run — fixes are specific to a release line, not to the package as a whole.

How do I monitor gogs.io/gogs for upcoming vulnerabilities?

Upload the manifest or SBOM for your application at vulert.com/scanner and Vulert keeps checking the gogs.io/gogs version you actually run against new disclosures, then alerts you when one affects it. There is no installation and no source-code access required.