Gogs patches critical zero-day enabling remote code execution

A critical zero-day vulnerability in Gogs, a remote collaboration platform, has been identified, allowing authenticated attackers to execute remote code and access private repositories. The flaw, present in versions up to 0.15.0+dev, stems from default configurations like open registration and unlimited repository crea…