Threats tagged 'ghsa-hqvj-j27r-9j7c'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
High	7.1	CVE-2026-123012In Gogs 0.14.3, the Git Smart HTTP authorization layer in internal/route/repo/http.go allows a push when only read High7.12026-11-05GCVE DatabaseCVE-2026-123012 In Gogs version 0.14.3, a vulnerability exists in the Git Smart HTTP authorization layer where a push operation is allowed despite the user having only read access. This is due to inconsistent case-sensitive checks on the HTTP verb, leading to improper authorization. This issue is distinct from CVE-2026-52810. Report on CVE-2026-123012 Vulnerability CWE-178 #ghsa-hqvj-j27r-9j7c	GCVE Database	2026-11-05

Page 1 of 1