{"action":"Upgrade gogs.io/gogs to 0.13.4 or later.","affected":[{"fixed":"0.13.4","introduced":"0.11.19"}],"component":"gogs.io/gogs","cve_ids":["CVE-2025-64175"],"ecosystem":"Go","epss":0.00477,"exploited":false,"fixed_versions":["0.13.4"],"ghsa_id":"GHSA-p6x6-9mx6-26wj","id":"tcs_01M5KFH19D7GWF26PES86GXT8H","modified_at":"2026-02-19T20:41:09.212728Z","published_at":"2026-02-06T17:54:52Z","references":["https://osv.dev/vulnerability/GHSA-p6x6-9mx6-26wj","https://github.com/gogs/gogs/security/advisories/GHSA-p6x6-9mx6-26wj","https://nvd.nist.gov/vuln/detail/CVE-2025-64175","https://github.com/gogs/gogs/commit/a617d52374e937db0edacfba2a26bdd14a05538e","https://github.com/gogs/gogs/commit/d568e048315dc9729c8518d8085cab7dbbfac80f","https://github.com/gogs/gogs"],"severity":{"label":"high","score":8.8},"sources":[{"source":"osv","source_id":"GHSA-p6x6-9mx6-26wj","url":"https://osv.dev/vulnerability/GHSA-p6x6-9mx6-26wj"},{"source":"nvd","source_id":"CVE-2025-64175","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-64175"}],"summary":"Gogs Vulnerable to 2FA Bypass via Recovery Code"}