Gogs has patched a critical security zero-day flaw that can allow attackers to compromise Internet-facing instances and access any repositories (including private ones). [...]
Gogs patches critical zero-day enabling remote code execution
Summary + source link. No paywalls, no tracking.