No fix yet for critical RCE bug in open-source Git service Gogs - exploit module is out
(www.theregister.com)
Worrisome. My instance thankfully had user self-registration already disabled. Given how aggressive AI-bot repo scrapers have gotten over the past year and a half, I might just shut it down entirely.