Affected by GO-2022-0471
and 11 other vulnerabilities
GO-2022-0473 : Cross site scripting via cookies in gogs in gogs.io/gogs
GO-2022-0483 : Cross-site Scripting vulnerability in repository issue list in Gogs in gogs.io/gogs
GO-2022-0554 : Unrestricted Upload of File with Dangerous Type in Gogs in gogs.io/gogs
GO-2022-0556 : OS Command Injection in file editor in Gogs in gogs.io/gogs
GO-2022-0562 : Path Traversal in Git HTTP endpoints in Gogs in gogs.io/gogs
GO-2022-0570 : Path Traversal in file editor on Windows in Gogs in gogs.io/gogs
GO-2022-0583 : Server-Side Request Forgery in gogs webhook in gogs.io/gogs
GO-2022-1060 : Gogs vulnerable to Cross-site Scripting in gogs.io/gogs
GO-2023-1596 : Gogs OS Command Injection vulnerability in gogs.io/gogs
Discover Packages
gogs.io/gogs
command
module
Version:
v0.12.6-rc.1
Opens a new window with list of versions in this module.
Published: Mar 19, 2022
License: MIT
Opens a new window with license information.
Imports: 5
Opens a new window with list of imports.
Imported by: 1
Opens a new window with list of known importers.
README
README
ยถ
Gogs - A painless self-hosted Git service
็ฎไฝไธญๆ
๐ฎ Vision
The Gogs (/gษgz/
) project aims to build a simple, stable and extensible self-hosted Git service that can be setup in the most painless way. With Go, this can be done with an independent binary distribution across ALL platforms that Go supports, including Linux, macOS, Windows and ARM.
๐ก Overview
๐ Features
User dashboard, user profile and activity timeline.
Access repositories via SSH, HTTP and HTTPS protocols.
User, organization and repository management.
Repository and organization webhooks, including Slack, Discord and Dingtalk.
Repository Git hooks, deploy keys and Git LFS.
Repository issues, pull requests, wiki, protected branches and collaboration.
Migrate and mirror repositories with wiki from other code hosts.
Web editor for quick editing repository files and wiki.
Jupyter Notebook and PDF rendering.
Authentication via SMTP, LDAP, reverse proxy, GitHub.com and GitHub Enterprise with 2FA.
Customize HTML templates, static files and many others.
Rich database backend, including PostgreSQL, MySQL, SQLite3 and TiDB .
Have localization over 30 languages .
๐พ Hardware requirements
A Raspberry Pi or $5 Digital Ocean Droplet is more than enough to get you started. Some even use 64MB RAM Docker CaaS .
2 CPU cores and 512MB RAM would be the baseline for teamwork.
Increase CPU cores when your team size gets significantly larger, memory footprint remains low.
๐ป Browser support
Please see Semantic UI for specific versions of supported browsers.
The smallest resolution officially supported is 1024*768 , however the UI may still look right in smaller resolutions, but no promises or fixes.
๐ Installation
Make sure you install the prerequisites first.
There are 6 ways to install Gogs:
Deploy to cloud
Tutorials
๐ฆ Software, service and product support
๐โโ๏ธ Acknowledgments
๐ Contributors
License
This project is under the MIT License. See the LICENSE file for the full license text.
Expand โพ
Collapse โด
Documentation
ยถ
Gogs is a painless self-hosted Git Service.
Source Files
ยถ
Directories
ยถ
internal
auth/ldap
Package ldap provide functions & structure to query a LDAP ldap directory For now, it's mainly tested again an MS Active Directory service, see README.md for more information
Package ldap provide functions & structure to query a LDAP ldap directory For now, it's mainly tested again an MS Active Directory service, see README.md for more information
db
FIXME: Put this file into its own package and separate into different files based on login sources.
FIXME: Put this file into its own package and separate into different files based on login sources.
lazyregexp
Package lazyregexp is a thin wrapper over regexp, allowing the use of global regexp variables without forcing them to be compiled at init.
Package lazyregexp is a thin wrapper over regexp, allowing the use of global regexp variables without forcing them to be compiled at init.
Click to show internal directories.
Click to hide internal directories.