Most recent entries from all https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 28 Sep 2026 06:42:01 +0000 CVE-2026-52806 — Gogs: RCE via git rebase --exec argument injection in pull request merge https://vulnerability.circl.lu/vuln/cve-2026-52806 <p><strong>Affected:</strong> gogs</p> <p>Gogs is an open source self-hosted Git service. Prior to 0.14.3, Gogs allows authenticated users to achieve Remote Code Execution (RCE) on the server by creating a pull request with a specially crafted branch name that injects the --exec flag into the git rebase command during the &#34;Rebase before merging&#34; merge operation. This vulnerability is fixed in 0.14.3.</p> <p><strong>Affected:</strong> gogs</p> <p>Gogs is an open source self-hosted Git service. Prior to 0.14.3, Gogs allows authenticated users to achieve Remote Code Execution (RCE) on the server by creating a pull request with a specially crafted branch name that injects the --exec flag into the git rebase command during the &#34;Rebase before merging&#34; merge operation. This vulnerability is fixed in 0.14.3.</p> https://vulnerability.circl.lu/vuln/cve-2026-52806