Go/gogs.io/gogs CVE-2025-8110: high 8.8, exploited, EPSS 85.20%

Gogs vulnerable to a bypass of CVE-2024-55947 in gogs.io/gogs

Action: No fix published. Pin and monitor.

Affected

Fixed versions

No fixed version in the source.

Sources

• osv: GO-2025-4225
• kev: CVE-2025-8110
• nvd: CVE-2025-8110
• https://github.com/advisories/GHSA-mq8m-42gh-wq7r
• http://wiz.io/blog/wiz-research-gogs-cve-2025-8110-rce-exploit
• http://www.openwall.com/lists/oss-security/2025/12/11/3
• http://www.openwall.com/lists/oss-security/2025/12/11/4

CVE-2025-8110 · published 2025-12-15T20:15:46Z · modified 2026-03-03T04:57:49.010975Z · JSON