[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Message-ID: <61dcfcad-c04d-4cef-9d2b-105e97048043@icloud.com>
Date: Sat, 17 Jan 2026 20:53:54 +0000
From: Chad Dougherty <crd477@...oud.com>
To: oss-security@...ts.openwall.com
Subject: Re: CVE-2025-8110 in Gogs self-hosted git service
On 12/10/25 11:18 PM, Alan Coopersmith wrote:
> https://github.com/gogs/gogs offers a MIT-licensed self-hosted git service.
>
> https://www.wiz.io/blog/wiz-research-gogs-cve-2025-8110-rce-exploit
> warns of
> CVE-2025-8110, an as-yet-unfixed vulnerability in this service which
> they say
> they are seeing being actively exploited.
>
FYI, this was reportedly fixed in https://github.com/gogs/gogs/pull/8082
-Chad
Powered by blists - more mailing lists
Please check out the
Open Source Software Security Wiki, which is counterpart to this
mailing list.
Confused about mailing lists and their use?
Read about mailing lists on Wikipedia
and check out these
guidelines on proper formatting of your messages.
