gogs.io/gogs (go) has 76 known vulnerabilities, the worst rated CRITICAL. No single fixed version is recorded that clears every advisory, so check each one below. No malicious-package signal is recorded.
Organization names containing path traversal sequences (../) are accepted by Gogs, and repositories under them are written to paths following these path…
CyberXYZ does not call a package safe in absolute terms. It records 76 known vulnerabilities for gogs.io/gogs (go), the worst rated CRITICAL, and no malicious-package signal. Whether it is acceptable depends on the version you run.
Does gogs.io/gogs have known vulnerabilities?
Yes. CyberXYZ records 76 known vulnerabilities for gogs.io/gogs (go), the worst rated CRITICAL. These include GHSA-c39w-43gm-34h5, GHSA-89mr-xqfv-758m, GHSA-qf6p-p7ww-cwr9, GHSA-cj4v-437j-jq4c, GHSA-gg64-xxr9-qhjp.
How do I check gogs.io/gogs before installing?
Search gogs.io/gogs in CyberXYZ Check at https://cyberxyz.io/check?q=gogs.io%2Fgogs. The xyz Scanner checks a project's dependencies, and CyberXYZ Proxy checks each package as it is installed.
Checked 2026-11-15 at 10:11 UTC. The most recent advisory here was published 2026-06-23. Updated continuously from NVD, GHSA, OSV and CNA feeds.