{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"0.13.3"}],"component":"gogs.io/gogs","cve_ids":["CVE-2025-8110"],"ecosystem":"Go","epss":0.85202,"exploited":true,"fixed_versions":[],"ghsa_id":"GHSA-mq8m-42gh-wq7r","id":"tcs_01M5KFG6REZM4EPZSM7R92CBHE","modified_at":"2026-02-03T02:58:31.328659Z","published_at":"2025-12-10T15:31:24Z","references":["https://osv.dev/vulnerability/GHSA-mq8m-42gh-wq7r","https://nvd.nist.gov/vuln/detail/CVE-2025-8110","https://github.com/gogs/gogs/pull/8078","https://github.com/gogs/gogs/pull/8082","https://github.com/gogs/gogs/commit/553707f3fd5f68f47f531cfcff56aa3ec294c6f6","https://github.com/advisories/GHSA-mq8m-42gh-wq7r","https://github.com/gogs/gogs","https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-8110","http://wiz.io/blog/wiz-research-gogs-cve-2025-8110-rce-exploit","http://www.openwall.com/lists/oss-security/2025/12/11/3","http://www.openwall.com/lists/oss-security/2025/12/11/4","http://www.openwall.com/lists/oss-security/2026/01/17/4","http://www.openwall.com/lists/oss-security/2026/01/18/1","http://www.openwall.com/lists/oss-security/2026/01/18/2"],"severity":{"label":"high","score":8.8},"sources":[{"source":"osv","source_id":"GHSA-mq8m-42gh-wq7r","url":"https://osv.dev/vulnerability/GHSA-mq8m-42gh-wq7r"},{"source":"kev","source_id":"CVE-2025-8110","url":"https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json"},{"source":"nvd","source_id":"CVE-2025-8110","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-8110"}],"summary":"Gogs vulnerable to a bypass of CVE-2024-55947"}