The git hook feature in Gogs 0.5.5 through 0.12.2 allows for authenticated remote code execution.
Published October 16, 2020.
Gogs Gogs