CRITICAL UNPATCHED FLAWS DISCLOSED IN POPULAR GOGS OPEN-SOURCE GIT SERVICE

Summary from the TLDR InfoSec newsletter

Four unpatched security vulnerabilities, including three critical ones, have been discovered in the open-source Git service Gogs. These flaws require authentication, but allow attackers to execute arbitrary commands, steal or delete source code, and plant backdoors.