CISA Alerts on Gogs Vulnerability Allowing Code Execution

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has identified a critical security vulnerability in Gogs, now listed in its Known Exploited Vulnerabilities (KEV) catalog. This high-severity flaw, designated as CVE-2025-8110 with a CVSS score of 8.7, involves path traversal in the repository file editor, potentially allowing for code execution. Immediate attention is urged to mitigate risks associated with this vulnerability. Users are advised to update their systems to ensure protection against exploitation.

Want More Context? 🔎