coldbraid

CVE-2025-8110 Gogs Gogs

Gogs contains a path traversal vulnerability affecting improper Symbolic link handling in the PutContents API that could allow for code execution.

CVSS
not scored

CWE-22

On CISA’s exploited list

Gogs Path Traversal Vulnerability

Added
2026-01-12
Federal patch deadline
2026-02-02
Ransomware use
not known