Gogs has patched a critical security zero-day flaw that can allow attackers to compromise Internet-facing instances and access any repositories (including private ones). [...]
Gogs patches critical zero-day enabling remote code execution
Résumé + lien vers la source. Sans paywall, sans tracking.