← Database

CVE-2026-123012

N/A CVSS: N/A Published: 2026-11-05 Modified: 2026-11-05

Description

In Gogs 0.14.3, the Git Smart HTTP authorization layer in internal/route/repo/http.go allows a push when only read access was intended, a different vulnerability than CVE-2026-52810. This occurs because of inconsistency about whether a verb is checked in a case-sensitive manner.

Affected Platforms

Unknown

Weakness Type

CWE-178

References