{"action":"Upgrade gogs.io/gogs to 0.13.4 or later.","affected":[{"fixed":"0.13.4","introduced":"0"}],"component":"gogs.io/gogs","cve_ids":["CVE-2026-22592"],"ecosystem":"Go","epss":0.00373,"exploited":false,"fixed_versions":["0.13.4"],"ghsa_id":"GHSA-cr88-6mqm-4g57","id":"tcs_01M5KF7S2XNCRQN8YKWKN5XZ5V","modified_at":"2026-02-19T20:41:25.323084Z","published_at":"2026-02-06T18:08:16Z","references":["https://osv.dev/vulnerability/GHSA-cr88-6mqm-4g57","https://github.com/gogs/gogs/security/advisories/GHSA-cr88-6mqm-4g57","https://nvd.nist.gov/vuln/detail/CVE-2026-22592","https://github.com/gogs/gogs/commit/961a79e8f9f2b3190ea804bcf635e4b43b123272","https://github.com/gogs/gogs","https://github.com/gogs/gogs/blob/4cc83c498b6ae59356a04912d68a932165bad5e6/internal/database/mirror.go#L269-L278","https://github.com/gogs/gogs/blob/4cc83c498b6ae59356a04912d68a932165bad5e6/internal/database/mirror.go#L333-L337"],"severity":{"label":"medium","score":6.5},"sources":[{"source":"osv","source_id":"GHSA-cr88-6mqm-4g57","url":"https://osv.dev/vulnerability/GHSA-cr88-6mqm-4g57"}],"summary":"Gogs has a Denial of Service issue"}