Gogs fixes critical zero-day vulnerability allowing remote code execution

Gogs has patched a critical zero-day vulnerability allowing remote code execution and access to private repositories. The flaw, an argument injection vulnerability, affects Gogs releases up to 0.14.2 and 0.15.0+dev. It can be exploited by authenticated users without admin privileges to compromise servers. This vulnerability is similar to past Gogs flaws and highlights the risks of default open registration configurations. Users are urged to upgrade immediately.