#gogs — Public Fediverse posts

While most of the OSS world and hobbiest seemed to move from #Gitea to #forgejo, I went into the another direction and installed #Gogs as it fits my needs.

It was also the only one that actually compiled on my #OpenBSD install. 🤫

Thanks to @OpenBSDAms for hosting this little box. 😍

@Codeberg I did look at some of the initiators/sponsors of the original proposal and did find one of apparently more important maintainers of @forgejo and formerly Gitea until it turned "commercial".

I wonder if this will lead to yet another fork of what started out as Gogs some probably 10 years ago now. Vibegeo? Vibeforge? Vibedistrict?
(Thanks the original author of Gogs back when btw. It was already pretty amazing back then!)

Certainly I will refrain from trying to propose (with PRs) a set of extensions to the issue system as said extensions and their raison d'etre have the evil taint of the LLM and hence certainly wouldn't be accepted. 🤷

#gogs #gitea #forgejo

#Gogs patches critical zero-day enabling remote code execution

https://www.bleepingcomputer.com/news/security/gogs-patches-critical-zero-day-enabling-remote-code-execution/

#cybersecurity

#Gogs patches critical zero-day enabling remote code execution

https://www.bleepingcomputer.com/news/security/gogs-patches-critical-zero-day-enabling-remote-code-execution/

#cybersecurity

Gogs Fixes Zero-Day Flaw Enabling Remote Code Execution

A critical vulnerability in Gogs allows attackers to execute remote code, putting Internet-facing instances at risk of full compromise - and it's easily exploitable by anyone who can create an account. This flaw enables attackers to wreak havoc without needing admin privileges, making swift action a must.

https://osintsights.com/gogs-fixes-zero-day-flaw-enabling-remote-code-execution?utm_source=mastodon&utm_medium=social

#ZeroDay #RemoteCodeExecution #Gogs #ArgumentInjection #EmergingThreats

Gogs Authors released #Gogs version 0.14.3. https://gogs.io/

Gogs Authors released #Gogs version 0.14.3. https://gogs.io/

📰 Unpatched Critical RCE Flaw (CVSS 9.4) in Gogs Git Service Puts Repositories at Risk

🚨 URGENT: A critical 9.4 CVSS unpatched RCE vulnerability has been disclosed in the Gogs Git service. Default installations are at risk of complete server takeover. No patch is available. Restrict access immediately! ⚠️ #Gogs #RCE #Vulnerability #Gi...

🌐 cyber[.]netsecops[.]io

🔗 https://cyber.netsecops.io/articles/critical-unpatched-rce-flaw-disclosed-in-gogs-git-service/?utm_sou…

Warten auf Sicherheitspatch: Self-hosted-Git-Service #Gogs ist verwundbar | Security https://www.heise.de/news/Warten-auf-Sicherheitspatch-Self-hosted-Git-Service-Gogs-ist-verwundbar-11311027.html #git :git:

Warten auf Sicherheitspatch: Self-hosted-Git-Service #Gogs ist verwundbar | Security https://www.heise.de/news/Warten-auf-Sicherheitspatch-Self-hosted-Git-Service-Gogs-ist-verwundbar-11311027.html #git :git:

New #Gogs zero-day flaw lets hackers get remote code execution

https://www.bleepingcomputer.com/news/security/new-gogs-zero-day-flaw-lets-hackers-get-remote-code-execution/

#cybersecurity #Git

New #Gogs zero-day flaw lets hackers get remote code execution

https://www.bleepingcomputer.com/news/security/new-gogs-zero-day-flaw-lets-hackers-get-remote-code-execution/

#cybersecurity #Git

Gogs Vulnerability Exposes Open-Source Git Service to RCE Attacks

A critical vulnerability in Gogs, an open-source Git service, has been exposed, leaving users open to remote code execution (RCE) attacks - and an exploit module is already available. The flaw was reported as early as March, but shockingly, the project's maintainers have failed to respond to the researcher ever since.

https://osintsights.com/gogs-vulnerability-exposes-open-source-git-service-to-rce-attacks?utm_source=mastodon&utm_medium=social

#Gogs #RemoteCodeExecution #Rce #Opensource #Git

Gogs Vulnerability Exposes Remote Code Execution Risk

A newly discovered vulnerability in Gogs puts servers at risk of remote code execution, allowing any authenticated user to inject malicious code through a simple pull request. By crafting a malicious branch name, attackers can exploit the --exec flag in git rebase to run unauthorized shell commands.

https://osintsights.com/gogs-vulnerability-exposes-remote-code-execution-risk?utm_source=mastodon&utm_medium=social

#RemoteCodeExecution #Gogs #Vulnerability #Git #SupplyChain

Gogs Zero-Day Flaw Enables Remote Code Execution on Exposed Servers

A zero-day flaw in Gogs, a self-hosted Git service, leaves exposed servers vulnerable to remote code execution - and it's surprisingly easy for attackers to exploit, as they can create an account and repository on default-configured instances. This critical-severity vulnerability affects the latest release versions and…

https://osintsights.com/gogs-zero-day-flaw-enables-remote-code-execution-on-exposed-servers?utm_source=mastodon&utm_medium=social

#Gogs #ZeroDay #RemoteCodeExecution #ArgumentinjectionFlaw #SelfhostedGitService

Ok. Nach der Entwicklung bei #gitlab sehe ich mich nach Alternativen um. #onedev fällt aus: "Built-in AI for DevOps Intelligence" und "Workspaces for Vibe Coding" - würg! #gogs genauso: ich klicke auf der Startseite auf "features" und lande mitten in der Doku unter "authentication" - brauch ich nicht! #radicle hatte ich mir schon mal angesehen und fand's damals zu kompliziert und sinnlos - neues Protokoll, das alles tut, was #git tut - es nur anders nennt - nee... #gitea - hmm, weiß ich nicht..

Ok. Nach der Entwicklung bei #gitlab sehe ich mich nach Alternativen um. #onedev fällt aus: "Built-in AI for DevOps Intelligence" und "Workspaces for Vibe Coding" - würg! #gogs genauso: ich klicke auf der Startseite auf "features" und lande mitten in der Doku unter "authentication" - brauch ich nicht! #radicle hatte ich mir schon mal angesehen und fand's damals zu kompliziert und sinnlos - neues Protokoll, das alles tut, was #git tut - es nur anders nennt - nee... #gitea - hmm, weiß ich nicht..

How to setup a self-hosted #git server at home using just #cli and #ssh, without using #gitea or #gogs , so you can migrate your personal projects away from #Bitbucket or #github or #gitlab https://vikaskumar.org/2026/05/01/setup-self-hosted-git-server.html

I'm running Forgejo for 2 weeks now. Local-only, no outside access. It mirrors all of my github repositories and the private ones I completely moved locally.

I was wondering why it reminds me so much of Gogs and then I realized it's forked from Gitea, but Gitea itself was Gogs-based. I used to host Gogs several years ago, but stopped after Github allowed private repos for free. What a come back.

#forgejo #gogs #github #gitea #selfhosting

I'm running Forgejo for 2 weeks now. Local-only, no outside access. It mirrors all of my github repositories and the private ones I completely moved locally.

I was wondering why it reminds me so much of Gogs and then I realized it's forked from Gitea, but Gitea itself was Gogs-based. I used to host Gogs several years ago, but stopped after Github allowed private repos for free. What a come back.

#forgejo #gogs #github #gitea #selfhosting

Bye GitHub, hello self-hosted #Gogs on #RaspberryPi ! 🍓🛠️ Tired of cloud dependencies? This #Docker tutorial installs Gogs (lightweight GitHub alternative) on any Pi—even Zero W—for repos, web UI, users, issues & SSH git. https://peppe8o.com/gogs-raspberry-pi/

Bye GitHub, hello self-hosted #Gogs on #RaspberryPi ! 🍓🛠️ Tired of cloud dependencies? This #Docker tutorial installs Gogs (lightweight GitHub alternative) on any Pi—even Zero W—for repos, web UI, users, issues & SSH git. https://peppe8o.com/gogs-raspberry-pi/

CVE Alert: CVE-2026-26194 - gogs - gogs - https://www.redpacketsecurity.com/cve-alert-cve-2026-26194-gogs-gogs/

#OSINT #ThreatIntel #CyberSecurity #cve-2026-26194 #gogs #

CVE Alert: CVE-2026-26194 - gogs - gogs - https://www.redpacketsecurity.com/cve-alert-cve-2026-26194-gogs-gogs/

#OSINT #ThreatIntel #CyberSecurity #cve-2026-26194 #gogs #

CVE Alert: CVE-2026-25232 - gogs - gogs - https://www.redpacketsecurity.com/cve-alert-cve-2026-25232-gogs-gogs/

#OSINT #ThreatIntel #CyberSecurity #cve-2026-25232 #gogs #

CVE Alert: CVE-2026-25232 - gogs - gogs - https://www.redpacketsecurity.com/cve-alert-cve-2026-25232-gogs-gogs/

#OSINT #ThreatIntel #CyberSecurity #cve-2026-25232 #gogs #

Gogs Authors released #Gogs version 0.14.2. https://gogs.io/

Gogs Authors released #Gogs version 0.14.2. https://gogs.io/

Настройка Git для одновременного fetch/push в несколько remotes. Синхронизация одной командой

Прим: Дополняет мою статью "Скрипт полной миграции из GitLab на свой сервер" . После успешной миграции А что делать со старым репозиторием? Было бы логично использовать GitLab и другие хостинги в качестве вторичных (запасных). Но как это делать? И еще не вручную? Для синхронизации с remotes одновременно на свой Gogs и на все GitLab, GitHub, Bitbucket, ... remotes, об этом и других "хаках" ниже:

https://habr.com/ru/articles/995074/

#git_fetch_push #sync #github #gitflow #bitbucket #gogs #mirroring #git_workflow #gitaliase #devops

Gogs Authors released #Gogs version 0.14.1. https://gogs.io/

Gogs Authors released #Gogs version 0.14.1. https://gogs.io/

Gogs Authors released #Gogs version 0.14.0. https://gogs.io/

Gogs Authors released #Gogs version 0.14.0. https://gogs.io/

Скрипт полной миграции из GitLab на свой сервер и настройка Git для одновременного fetch/push в несколько remotes

1. Что сделал? Переехал с GitLab на свой сервер, написал свой python-скрипт, который мигрирует не просто все репозитории, но и настройки, описания, картинки(done) и мердж/пулл-реквесты(in-progress). Бонусом настроил простой git fetch/push одновременно на все GitLab, GitHub, ... remotes. 2. Зачем? Локальный сервис независим от РКН, КВН, "чебурнета" и гео-блокировки аккаунта, бэкап под контролем, без опасения утечек из облаков по независящим причинам. 3. Как? Когда у тебя несколько десятков pet-проектов на Gitlab/Github, для каждого копи-пастить git clone/push --mirror со многими параметрами и вручную копаться в web интерфейсах откровенно "скучно и лениво". В статье: поиск решения по полной миграции, комментарии по коду и настройки скрипта. Вторую часть по мульти git fetch/push оформляю Гуглил похожие решения, не нашел. В итоге написал свое.

https://habr.com/ru/articles/984578/

#gogs #mirroring #migrate_api #python #selfhosted #git #migration #automation #gitlabapi #gogsapi

Gogs Authors released #Gogs version 0.13.4. https://gogs.io/

Gogs Authors released #Gogs version 0.13.4. https://gogs.io/

Jetzt handeln! Angreifer haben seit Monaten #Gogs-Server im Visier | Security https://www.heise.de/news/Jetzt-handeln-Angreifer-haben-seit-Monaten-Gogs-Server-im-Visier-11138757.html #git :git: #Workaround #exploit

Jetzt handeln! Angreifer haben seit Monaten #Gogs-Server im Visier | Security https://www.heise.de/news/Jetzt-handeln-Angreifer-haben-seit-Monaten-Gogs-Server-im-Visier-11138757.html #git :git: #Workaround #exploit

📰 Urgent Patch: CISA Adds Actively Exploited Gogs RCE Flaw to KEV Catalog

🚨 URGENT: CISA adds a critical, actively exploited RCE vulnerability in Gogs Git service (CVE-2025-8110) to its KEV catalog. The flaw allows full server takeover. Federal agencies must patch by Feb 2. All orgs urged to act now! ⚠️ #CVE #Gogs #RCE

🔗 https://cyber.netsecops.io/articles/cisa-adds-actively-exploited-gogs-rce-vulnerability-to-kev-catalog/?utm_source=mastodon&utm_medium=social&utm_campaign=twitter_auto

CVE Alert: CVE-2025-8110 - Gogs - Gogs - https://www.redpacketsecurity.com/cve-alert-cve-2025-8110-gogs-gogs/

#OSINT #ThreatIntel #CyberSecurity #cve-2025-8110 #gogs #

CVE Alert: CVE-2025-8110 - Gogs - Gogs - https://www.redpacketsecurity.com/cve-alert-cve-2025-8110-gogs-gogs/

#OSINT #ThreatIntel #CyberSecurity #cve-2025-8110 #gogs #

@alcea @Codeberg is based on one of the forks of @gitea called @forgejo . Gitea is based on #gogs, the OG of the #Go #Git Services. I already was nice before 2015 if I remember correctly. So I guess, there's some staying power in this thing. It just happens to change its name and custodians from time to time... 😆

To my knowledge one of the main points of Forgejo was the intent to enable #federation of these forges. Not sure how done that is is though.
Give it a go, setup used to be quite painfree through all of them. DB migrations always were...not amazing but mostly stable.

@alcea @Codeberg is based on one of the forks of @gitea called @forgejo . Gitea is based on #gogs, the OG of the #Go #Git Services. I already was nice before 2015 if I remember correctly. So I guess, there's some staying power in this thing. It just happens to change its name and custodians from time to time... 😆

To my knowledge one of the main points of Forgejo was the intend to enable #federation of these forges. Not sure how done that is is though.
Give it a go, setup used to be quite painfree through all of them. DB migrations always were...not amazing but mostly stable.

@huravarman The "forjeo" thing is properly called "#Forgejo" (@forgejo), #gogs is probably mostly superseeded by #gitea / @gitea these days.
Both gitea (commercial support) and forgejo (not so commercial and probably also commercial support available) have some sort of credible investment and support/maintenance behind them. I'd give them a go, but of course all depends on what you want from such a tool.

Alarming: Jeder zweite self-hosted Gogs-Server im Netz ist kompromittiert! 🔒💥 Forscher entdecken schwere Sicherheitslücken in der Git-Software. Zeit für Updates oder Alternativen wie Gitea?

https://www.golem.de/news/self-hosted-git-jeder-zweite-gogs-server-im-netz-ist-wohl-kompromittiert-2512-203189.html

#Cybersecurity #Gogs #GitServer #InfoSec #Newz

Alarming: Jeder zweite self-hosted Gogs-Server im Netz ist kompromittiert! 🔒💥 Forscher entdecken schwere Sicherheitslücken in der Git-Software. Zeit für Updates oder Alternativen wie Gitea?

https://www.golem.de/news/self-hosted-git-jeder-zweite-gogs-server-im-netz-ist-wohl-kompromittiert-2512-203189.html

#Cybersecurity #Gogs #GitServer #InfoSec #Newz

Sites built with Gogs (for self-hosting) are getting clobbered at the moment.

#Git #Gogs #CVE

https://www.theregister.com/2025/12/10/gogs_0day_under_active_exploitation/?td=rt-3a

Sites built with Gogs (for self-hosting) are getting clobbered at the moment.

#Git #Gogs #CVE

https://www.theregister.com/2025/12/10/gogs_0day_under_active_exploitation/?td=rt-3a

Unpatched Gogs Zero-Day Exploited for Months https://www.securityweek.com/unpatched-gogs-zero-day-exploited-for-months/ #Vulnerabilities #exploited #ZeroDay #Gogs

Unpatched Gogs Zero-Day Exploited for Months https://www.securityweek.com/unpatched-gogs-zero-day-exploited-for-months/ #Vulnerabilities #exploited #ZeroDay #Gogs