Improper Handling of Exceptional Conditions Affecting gogs.io/gogs/internal/route/repo package, versions <0.14.3-rc.1


Severity

Recommended
0.0
medium
0
10

CVSS assessment by Snyk's Security Team. Learn more

Threat Intelligence

EPSS
0.44% (37th percentile)

Do your applications use this vulnerable package?

In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.

Test your applications
  • Snyk IDSNYK-GOLANG-GOGSIOGOGSINTERNALROUTEREPO-17756813
  • published7 Jul 2026
  • disclosed24 Jun 2026
  • creditUnknown

Introduced: 24 Jun 2026

CVE-2025-64719  (opens in a new tab)
CWE-755  (opens in a new tab)

How to fix?

Upgrade gogs.io/gogs/internal/route/repo to version 0.14.3-rc.1 or higher.

Overview

Affected versions of this package are vulnerable to Improper Handling of Exceptional Conditions via the internal/route/repo/wiki.go and internal/route/repo/view.go processes. An attacker can cause the web interface to become unusable and trigger HTTP 500 errors by creating a new file and causing errors during the recovery of commit information.

CVSS Base Scores

version 4.0
version 3.1