Gogs: UploadRepoFiles writes outside repo working tree via committed parent sym
Go gogs.io/gogs · Upgrade to 0.14.3 or later · < 0.14.3 · CVE-2026-52811 · GHSA-89mr-xqfv-758m
Published open-source security advisories, matched to the exact versions you run.
Run in a terminal
claude mcp add --scope user --transport http patchnext https://mcp.patchnext.com && claude mcp login patchnext
Your browser opens: sign in and choose what the agent may read.
Then ask: What do I need to patch on this machine?
51–61 of 61 matching · newest first
Go gogs.io/gogs · Upgrade to 0.14.3 or later · < 0.14.3 · CVE-2026-52811 · GHSA-89mr-xqfv-758m
Go gogs.io/gogs · Upgrade to 0.14.3 or later · < 0.14.3 · CVE-2026-52810 · GHSA-wmfg-5p4h-5fw3 · amended
Go gogs.io/gogs · Upgrade to 0.14.3 or later · < 0.14.3 · CVE-2026-52809 · GHSA-5c3f-6486-3g7g
Go gogs.io/gogs · Upgrade to 0.14.3 or later · < 0.14.3 · CVE-2026-52808 · GHSA-268j-37xf-pp52
Go gogs.io/gogs · Upgrade to 0.14.3 or later · < 0.14.3 · CVE-2026-52807 · GHSA-vcm5-gvmp-78mp · amended
Go gogs.io/gogs · Upgrade to 0.14.3 or later · < 0.14.3 · CVE-2026-52806 · GHSA-qf6p-p7ww-cwr9
Go gogs.io/gogs · Upgrade to 0.14.3 or later · < 0.14.3 · CVE-2026-52805 · GHSA-g2f5-gjr4-qjvm
Go gogs.io/gogs · Upgrade to 0.14.3 or later · < 0.14.3 · CVE-2026-52804 · GHSA-4565-r4x7-hg8j
Go gogs.io/gogs · Upgrade to 0.14.3 or later · <= 0.14.2 · CVE-2026-52802 · GHSA-xxhq-69mf-w8cr
Go gogs.io/gogs · Upgrade to 0.14.3 or later · < 0.14.3 · CVE-2026-52801 · GHSA-wv27-2vqp-j7g5
Go gogs.io/gogs · Upgrade to 0.14.3 or later · < 0.14.3 · CVE-2026-52800 · GHSA-pwx3-qcgw-vh7h
A vendor fix does not resolve your finding until you verify it in your own systems.
Security reports that are not matched to your stack.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.