Re: [oss-security] CVE-2025-8110 in Gogs self-hosted git service

[Chad Dougherty]

On 12/10/25 11:18 PM, Alan Coopersmith wrote:

https://github.com/gogs/gogs offers a MIT-licensed self-hosted git service.

https://www.wiz.io/blog/wiz-research-gogs-cve-2025-8110-rce-exploit warns of CVE-2025-8110, an as-yet-unfixed vulnerability in this service which they say

they are seeing being actively exploited.

FYI, this was reportedly fixed in https://github.com/gogs/gogs/pull/8082

    -Chad