-
CVSS Score
-Basic Information
CVE ID
-
GHSA ID
-
EPSS Score
-
CWE
-
Published
-
Updated
-
KEV Status
-
Technology
-
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AI| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| github.com/go-gitea/gitea | go | >= 1.9.0, < 1.13.2 | 1.13.2 |
GoGoMiggo AIRoot Cause AnalysisThe key evidence comes from the fix in PR #14390 which replaced filepath with path in routers/editor.go. Filepath functions on Windows resolve path separators and clean paths differently, enabling attackers to craft malicious paths that exceed stack buffer limits through repeated directory traversals. The commit message explicitly states this caused stack overflow vulnerabilities, and the CWE-787 classification confirms this is an out-of-bounds write scenario.
Ongoing coverage of React2Shell