open source security

2 articles · newest first

A terminal window showing Git commands on a dark background, representing a self-hosted Git server

Gogs has a history of sitting on RCE bugs. this time, someone actually fixed it

Two critical bugs let anyone overwrite Git hooks and run code on your server — and for once, the fix shipped before it turned into the usual Gogs mess.

Priya Nair · 1h ago · 6 min

A developer's screen showing a git diff and terminal window side by side

Software

your newest Gitea contributor might already have a shell on your server

A patch, a diff, and a Git hook was all it took — no admin access required, and Gitea's own advisory shipped with working exploit code attached.

Priya Nair · Aug 3 · 6 min