← All advisories

Critical severity9.1NVD Advisory· Published Mar 11, 2022· Updated Jun 17, 2026

CVE-2022-0871

CVE-2022-0871

Description

Missing Authorization in GitHub repository gogs/gogs prior to 0.12.5.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
gogs.io/gogsGo	< 0.12.5	0.12.5

Affected products

3

Gogs/Gogs2 versions
cpe:2.3:a:gogs:gogs:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:gogs:gogs:*:*:*:*:*:*:*:*range: <0.12.5
- (no CPE)range: unspecified
ghsa-coords
pkg:golang/gogs.io/gogs
Range: < 0.12.5

Patches

Vulnerability mechanics

References

6

github.com/gogs/gogs/commit/64102be2c90e1b47dbdd379873ba76c80d4b0e78nvdPatchThird Party AdvisoryWEB
huntr.dev/bounties/ea82cfc9-b55c-41fe-ae58-0d0e0bd7ab62nvdExploitIssue TrackingPatchThird Party AdvisoryWEB
github.com/advisories/GHSA-gw5h-h6hj-f56gghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2022-0871ghsaADVISORY
github.com/gogs/gogs/issues/6810ghsaWEB
github.com/gogs/gogs/security/advisories/GHSA-gw5h-h6hj-f56gghsaWEB

News mentions

0

No linked articles in our index yet.