CVE-2026-25242 | Gogs up to 0.14.0 /releases/attachments authorization

February 19, 2026 Yanac

A vulnerability was found in Gogs up to 0.14.0. It has been rated as problematic. This affects an unknown part of the file /releases/attachments. Performing a manipulation results in missing authorization.

This vulnerability is cataloged as CVE-2026-25242. It is possible to initiate the attack remotely. There is no exploit available.

Upgrading the affected component is advised.VulDB Recent EntriesRead More