Security Advisory

CVE-2025-64111

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2026-02-06 16:58:01
Last updated 2026-02-26 15:04:16
Assigner GitHub_M
State PUBLISHED

Description

Gogs is an open source self-hosted Git service. In version 0.13.3 and prior, due to the insufficient patch for CVE-2024-56731, its still possible to update files in the .git directory and achieve remote command execution. This issue has been patched in versions 0.13.4 and 0.14.0+dev.