Gogs patches critical zero-day enabling remote code execution

Gogs released version 0.14.3 on June 7 to patch a critical argument injection vulnerability enabling remote code execution. The flaw affects all releases up to 0.14.2 and 0.15.0+dev. Authenticated attackers can compromise servers, read private repositories, steal credentials, and alter source code. Rapid7 recommends immediate upgrade.