{"action":"Upgrade github.com/gogs/gogs to 0.13.3-0.20250608224432-110117b2e5e5 or later.","affected":[{"fixed":"0.13.3-0.20250608224432-110117b2e5e5","introduced":"0"}],"component":"github.com/gogs/gogs","cve_ids":["CVE-2025-47943"],"ecosystem":"Go","epss":0.00386,"exploited":false,"fixed_versions":["0.13.3-0.20250608224432-110117b2e5e5"],"ghsa_id":"GHSA-xh32-cx6c-cp4v","id":"tcs_01M5KFS84WKZSM0X6PTPVGADGM","modified_at":"2026-09-10T03:50:25.589578334Z","published_at":"2025-06-26T16:54:01Z","references":["https://osv.dev/vulnerability/GHSA-xh32-cx6c-cp4v","https://github.com/gogs/gogs/security/advisories/GHSA-xh32-cx6c-cp4v","https://nvd.nist.gov/vuln/detail/CVE-2025-47943","https://github.com/gogs/gogs/commit/110117b2e5e5baa4809c819bec701e929d2d8d40","https://github.com/gogs/gogs","https://github.com/gogs/gogs/releases/tag/v0.13.3","https://www.hacktivesecurity.com/blog/2025/07/15/cve-2025-47943-stored-xss-in-gogs-via-pdf"],"severity":{"label":"medium","score":6.3},"sources":[{"source":"osv","source_id":"GHSA-xh32-cx6c-cp4v","url":"https://osv.dev/vulnerability/GHSA-xh32-cx6c-cp4v"}],"summary":"Gogs XSS allowed by stored call in PDF renderer"}