—
GO-2024-3356
Path Traversal in file update API in gogs in gogs.io/gogs
Quick fix
GO-2024-3356 — gogs.io/gogs: upgrade to the fixed version with the command below.
go get gogs.io/gogs@v0.13.1Details
Path Traversal in file update API in gogs in gogs.io/gogs
Are you affected?
Enter the version of the package you're using.
Affected packages
References
- https://github.com/gogs/gogs/security/advisories/GHSA-qf5v-rp47-55gg[ADVISORY]
- https://nvd.nist.gov/vuln/detail/CVE-2024-55947[ADVISORY]
- https://github.com/gogs/gogs/commit/9a9388ace25bd646f5098cb9193d983332c34e41[WEB]
- https://github.com/gogs/gogs/issues/7582[WEB]
- https://github.com/gogs/gogs/pull/7859[WEB]