CVE-2024-44625

Go/gogs.io/gogs CVE-2024-44625: high 8.8, EPSS 16.50%

Remote Code Execution in Gogs

Action: Upgrade gogs.io/gogs to 0.13.2 or later.

go get gogs.io/gogs@v0.13.2

Affected

Fixed versions

Sources

• osv: GHSA-phm4-wf3h-pc3r
• https://nvd.nist.gov/vuln/detail/CVE-2024-44625
• https://fysac.github.io/posts/2024/11/unpatched-remote-code-execution-in-gogs
• https://github.com/gogs/gogs
• https://gogs.io
• https://pkg.go.dev/vuln/GO-2024-3275

CVE-2024-44625 · published 2024-11-15T18:30:51Z · modified 2025-10-08T14:27:52Z · JSON

Go/gogs.io/gogs CVE-2024-44625: unknown, EPSS 16.50%

Unpatched Remote Code Execution in Gogs in gogs.io/gogs

Action: No fix published. Pin and monitor.

Affected

Fixed versions

No fixed version in the source.

Sources

• osv: GO-2024-3275
• https://github.com/advisories/GHSA-phm4-wf3h-pc3r
• https://nvd.nist.gov/vuln/detail/CVE-2024-44625
• https://fysac.github.io/posts/2024/11/unpatched-remote-code-execution-in-gogs

CVE-2024-44625 · published 2024-11-19T17:20:31Z · modified 2026-03-03T04:56:01.489836Z · JSON