Go/gogs.io/gogs: high 7.3
Gogs vulnerable to Stored XSS via Mermaid diagrams
Action: Upgrade gogs.io/gogs to 0.13.4 or later.
go get gogs.io/gogs@v0.13.4Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.13.4 | - |
Fixed versions
| 0.13.4 |
Sources
- osv: GHSA-26gq-grmh-6xm6
- https://github.com/gogs/gogs/security/advisories/GHSA-26gq-grmh-6xm6
- https://github.com/mermaid-js/mermaid/security/advisories/GHSA-7rqq-prvp-x9jh
- https://github.com/mermaid-js/mermaid/security/advisories/GHSA-8gwm-58g9-j8pw
- https://github.com/gogs/gogs/commit/71a72a72ad1c8cea7940c9d7e4cbdfbc0fc3d401
- https://github.com/gogs/gogs
published · modified · JSON