Vulnerabilities > Gogs > Gogs > 0.12.10

DATE CVE VULNERABILITY TITLE RISK
2023-02-25 CVE-2022-2024 OS Command Injection vulnerability in Gogs
OS Command Injection in GitHub repository gogs/gogs prior to 0.12.11.
network
low complexity
gogs CWE-78
critical
 9.8
9.8
2022-10-11 CVE-2022-32174 Cross-site Scripting vulnerability in Gogs
In Gogs, versions v0.6.5 through v0.12.10 are vulnerable to Stored Cross-Site Scripting (XSS) that leads to an account takeover.
network
low complexity
gogs CWE-79
critical
 9.0
9.0