Re: CVE-2025-8110 in Gogs self-hosted git service

[Chad Dougherty <crd477 () icloud com>]

On 12/10/25 11:18 PM, Alan Coopersmith wrote:
> https://github.com/gogs/gogs offers a MIT-licensed self-hosted git service.
>
> https://www.wiz.io/blog/wiz-research-gogs-cve-2025-8110-rce-exploit 
> warns of
> CVE-2025-8110, an as-yet-unfixed vulnerability in this service which 
> they say
> they are seeing being actively exploited.

FYI, this was reportedly fixed in https://github.com/gogs/gogs/pull/8082

    -Chad