{"action":"Upgrade github.com/ory/hydra to 1.4.8 or later.","affected":[{"fixed":"1.4.8","introduced":"0"}],"component":"github.com/ory/hydra","cve_ids":["CVE-2019-8400"],"ecosystem":"Go","epss":0.01328,"exploited":false,"fixed_versions":["1.4.8"],"ghsa_id":"GHSA-7v6r-w4r6-mhch","id":"tcs_01M5KF2NKACPA8RKDSJ98EJQ2N","modified_at":"2026-03-26T21:11:15.549710Z","published_at":"2022-05-14T01:33:08Z","references":["https://osv.dev/vulnerability/GHSA-7v6r-w4r6-mhch","https://nvd.nist.gov/vuln/detail/CVE-2019-8400","https://github.com/ory/hydra/commit/9b5bbd48a72096930af08402c5e07fce7dd770f3","https://hackerone.com/reports/456333","https://drive.google.com/file/d/1-25expUYVfK6vsiCmEabUCuelOP7aUDj/view?usp=drivesdk","https://github.com/ory/hydra","https://github.com/ory/hydra/blob/master/CHANGELOG.md#v100-rc3oryos9-2018-12-06","https://www.youtube.com/watch?v=RIyZLeKEC8E"],"severity":{"label":"medium","score":6.1},"sources":[{"source":"osv","source_id":"GHSA-7v6r-w4r6-mhch","url":"https://osv.dev/vulnerability/GHSA-7v6r-w4r6-mhch"}],"summary":"Hydra has Reflected XSS via error_hint parameter"}