Input Validation and Logic

Every one of the 4 is a mark on the map. Named now: 1 to 4, most at risk first.

1. Gogs <0.12.6 - Remote Command ExecutionCVE-2022-0415gogs · CVSS 9.9 · 66% likely

   CWE-20

2. Gogs: Ability to import local repositories via Mirror SettingsCVE-2026-52801gogs · CVSS 8.1 · 0.6% likely

   CWE-20

3. Gogs: Denial of Service in repository/wiki file listing web pagesCVE-2025-64719gogs · CVSS 4.9 · 0.4% likely

   CWE-20

4. In Gogs 0.14.3, the Git Smart HTTP authorization layer in internal/route/repo/http.go allows a push when only read access was intended, a different vulnerability than CVE-2026-528…CVE-2026-123012Gogs · CVSS 7.1 · 0.3% likely

   CWE-178

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.