ZeusQA
Start free

Known exploited vulnerabilities

Gogs vulnerabilities attackers have used

Every Gogs vulnerability in CISA's Known Exploited Vulnerabilities catalog, newest first, with the federal due date and whether it fed ransomware campaigns.

The short answer

CISA lists 1 Gogs vulnerability as exploited in the wild, 1 of them added in the last 12 months. The most recent is CVE-2025-8110, added Jan 12, 2026. Gogs has the most entries (1).

In KEV, all time
1
Added, last 12 months
1
Used in ransomware
0
New CVEs this week
0

Every Gogs entry in CISA KEV

  1. CVE-2025-8110

    Added · due

    Gogs Path Traversal Vulnerability

    Gogs contains a path traversal vulnerability affecting improper Symbolic link handling in the PutContents API that could allow for code execution.

Related

Know the day a CVE lands in your code

Connect a GitHub repository and ZeusQA checks its dependencies daily, briefs each advisory and opens the fix. Three test runs free, no card.

Start freeSee how a run works