oss-sec mailing list archives

Re: CVE-2025-8110 in Gogs self-hosted git service

From: Jakub Wilk <jwilk () jwilk net>
Date: Thu, 11 Dec 2025 16:33:29 +0100

* Alan Coopersmith <alan.coopersmith () oracle com>, 2025-12-10 15:18:

https://github.com/gogs/gogs offers a MIT-licensed self-hosted gitservice.


Gogs has a couple of notable forks: Gitea, Forgejo.
Does anyone know if they are affected?

--
Jakub Wilk

CVE-2025-8110 in Gogs self-hosted git service Alan Coopersmith (Dec 10)
- Re: CVE-2025-8110 in Gogs self-hosted git service Jakub Wilk (Dec 11)
  - Re: CVE-2025-8110 in Gogs self-hosted git service Martin Weinelt (Dec 11)