{"action":"Upgrade gogs.io/gogs to 0.13.3 or later.","affected":[{"fixed":"0.13.3","introduced":"0"}],"component":"gogs.io/gogs","cve_ids":["CVE-2024-56731"],"ecosystem":"Go","epss":0.0115,"exploited":false,"fixed_versions":["0.13.3"],"ghsa_id":"GHSA-wj44-9vcg-wjq7","id":"tcs_01M5KFQSSQPRXKWP0NEC9SD9DK","modified_at":"2025-07-28T20:42:04.801588Z","published_at":"2025-06-24T19:00:20Z","references":["https://osv.dev/vulnerability/GHSA-wj44-9vcg-wjq7","https://github.com/gogs/gogs/security/advisories/GHSA-wj44-9vcg-wjq7","https://nvd.nist.gov/vuln/detail/CVE-2024-56731","https://github.com/gogs/gogs/commit/77a4a945ae9a87f77e392e9066b560edb71b5de9","https://github.com/advisories/GHSA-ccqv-43vm-4f3w","https://github.com/gogs/gogs","https://github.com/gogs/gogs/releases/tag/v0.13.3"],"severity":{"label":"critical","score":10},"sources":[{"source":"osv","source_id":"GHSA-wj44-9vcg-wjq7","url":"https://osv.dev/vulnerability/GHSA-wj44-9vcg-wjq7"}],"summary":"Gogs allows deletion of internal files which leads to remote command execution"}