CVE-2026-22592

Gogs is an open source self-hosted Git service. In version 0.13.3 and prior, an authenticated user can cause a DOS attack. If one of the repo files is deleted before synchronization, it will cause the application to crash. This issue has been patched in versions 0.13.4 and 0.14.0+dev.

• CWE-862

• https://github.com/gogs/gogs/security/advisories/GHSA-cr88-6mqm-4g57Exploit, Vendor Advisory
• https://github.com/gogs/gogs/security/advisories/GHSA-cr88-6mqm-4g57Exploit, Vendor Advisory

Published

Feb 6, 2026

Last Modified

Jun 17, 2026

Status

Analyzed

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-22585Use of a Broken or Risky Cryptographic Algorithm vulnerabili…9.8
• CVE-2026-22586Hard-coded Cryptographic Key vulnerability in Salesforce Mar…9.8
• CVE-2026-22587Ideagen DevonWay contains a stored cross site scripting vuln…5.5
• CVE-2026-22588Spree is an open source e-commerce solution built with Ruby …6.5
• CVE-2026-22589Spree is an open source e-commerce solution built with Ruby …7.5
• CVE-2026-2259A vulnerability has been found in aardappel lobster up to 20…5.5
• CVE-2026-22593EVerest is an EV charging software stack. Prior to version 2…7.8
• CVE-2026-22594Ghost is a Node.js content management system. In versions 5.…8.1
• CVE-2026-22595Ghost is a Node.js content management system. In versions 5.…8.1
• CVE-2026-22596Ghost is a Node.js content management system. In versions 5.…7.2
• CVE-2026-22597Ghost is a Node.js content management system. In versions 5.…2.7
• CVE-2026-22598ManageIQ is an open-source management platform. A flaw was f…7.1