Actively exploited vulnerabilities affecting Gogs products.https://wildfortech.comhttps://wildfortech.com/security#CVE-2025-8110https://wildfortech.com/security#CVE-2025-8110Gogs, a self-hosted Git service, has a path traversal flaw in its PutContents API caused by improper handling of symbolic links. An attacker who can craft API requests could escape intended directory boundaries, potentially writing or manipulating files outside the repository. This could lead to remote code execution on the host system, making it a serious risk for any organization running Gogs as part of their development infrastructure.Mon, 12 Jan 2026 00:00:00 GMTGogsGogs