An unpatched zero-day vulnerability in the Gogs self-hosted Git service can allow attackers to gain remote code execution (RCE) on Internet-facing instances. [...]
New Gogs zero-day flaw lets hackers get remote code execution
Summary + source link. No paywalls, no tracking.