Threats affecting pkg:golang/Gogs

CVE-2026-123012 is a vulnerability in Gogs version 0.14.3 where the Git Smart HTTP authorization layer improperly handles case sensitivity when checking verbs. This flaw allows a user with only read access to perform a push operation, which should be restricted. The issue arises due to inconsistent case-sensitive checks in the authorization logic.