{"id":"GO-2026-5098","revision":"36600381ff7e486f966309d4cff608fb","records":[{"revision":"36600381ff7e486f966309d4cff608fb","observedAt":"2026-10-24T13:19:41.952+00:00","statement":{"source":"osv","id":"GO-2026-5098","aliases":["CVE-2025-64719","GHSA-3qq3-668m-v9mj"],"title":"Gogs has a Denial of Service in repository/wiki file listing web pages in gogs.io/gogs","description":"Gogs has a Denial of Service in repository/wiki file listing web pages in gogs.io/gogs.\n\nNOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions.\n\n(If this is causing false-positive reports from vulnerability scanners, please suggest an edit to the report.)\n\nThe additional affected modules and versions are: gogs.io/gogs before v0.14.3.","state":0,"publishedAt":"2026-06-25T18:26:48+00:00","modifiedAt":"2026-06-25T18:45:19.5281315+00:00","affected":[{"ecosystem":"Go","name":"gogs.io/gogs","ranges":[{"type":"SEMVER","events":[{"kind":"introduced","version":"0"}]}],"versions":[],"rawVersionEvidence":null}],"metrics":[],"references":["https://github.com/gogs/gogs/security/advisories/GHSA-3qq3-668m-v9mj","https://github.com/gogs/gogs/commit/ae41bab5f28e4880edcef01c91d2cbb8839ec9e4","https://github.com/gogs/gogs/pull/8116","https://github.com/gogs/gogs/releases/tag/v0.14.3"],"sourceUrl":"https://osv.dev/vulnerability/GO-2026-5098","license":"OSV · upstream source license applies","key":"osv:GO-2026-5098","identifiers":["GO-2026-5098","CVE-2025-64719","GHSA-3qq3-668m-v9mj"]},"retained":false,"historicalAffected":[]}],"coverage":[]}