CVE-2026-25921 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

Gogs is an open source self-hosted Git service. Prior to version 0.14.2, overwritable LFS object across different repos leads to supply-chain attack, all LFS ob…
Critical CVSS: 9.3

CVE-2026-25921

Gogs is an open source self-hosted Git service. Prior to version 0.14.2, overwritable LFS object across different repos leads to supply-chain attack, all LFS objects are vulnerable to be maliciously overwritten by malicious attackers. This issue has been patched in version 0.14.2.
Vendor
Gogs
Product
Gogs
CWE
CWE-345
Yayın Tarihi
2026-03-05 19:16:03
Güncelleme
2026-03-06 14:02:02
Source Identifier
security-advisories@github.com
KEV Date Added
-

Kategoriler

CWE-345 Gogs CRITICAL Gogs 2026

Referanslar

https://github.com/gogs/gogs/commit/81ee8836445ac888d99da8b652be7d5cbc5c4d5c https://github.com/gogs/gogs/pull/8166 https://github.com/gogs/gogs/releases/tag/v0.14.2 https://github.com/gogs/gogs/security/advisories/GHSA-cj4v-437j-jq4c