Gogs patches critical zero-day enabling remote code execution
Gogs patched a critical zero-day argument-injection vulnerability that can allow attackers to compromise Internet-facing instances and access any repositories, including private ones. The vulnerability affects all Gogs releases up to and including 0.14.2 and 0.15.0+dev.
CERT24