{"action":"Upgrade gogs.io/gogs to 0.13.4 or later.","affected":[{"fixed":"0.13.4","introduced":"0"}],"component":"gogs.io/gogs","cve_ids":["CVE-2025-65852"],"ecosystem":"Go","exploited":false,"fixed_versions":["0.13.4"],"ghsa_id":"GHSA-rjv5-9px2-fqw6","id":"tcs_01M5KFMW0P31Y5HZ7K9JWDBBW9","modified_at":"2026-02-22T23:25:42.838297Z","published_at":"2026-02-06T19:47:26Z","references":["https://osv.dev/vulnerability/GHSA-rjv5-9px2-fqw6","https://github.com/gogs/gogs/security/advisories/GHSA-rjv5-9px2-fqw6","https://github.com/gogs/gogs/commit/961a79e8f9f2b3190ea804bcf635e4b43b123272","https://github.com/gogs/gogs","https://github.com/gogs/gogs/releases/tag/v0.13.4"],"severity":{"label":"medium"},"sources":[{"source":"osv","source_id":"GHSA-rjv5-9px2-fqw6","url":"https://osv.dev/vulnerability/GHSA-rjv5-9px2-fqw6"}],"summary":"Gogs has authorization bypass in repository deletion API"}