CVE-2026-23633

Publication date

2026-02-06 17:46:59

Family

GitHub_M

State

PUBLISHED

Description

Gogs is an open source self-hosted Git service. In version 0.13.3 and prior, there is an arbitrary file read/write via path traversal in Git hook editing. This issue has been patched in versions 0.13.4 and 0.14.0+dev.