{"action":"Upgrade gogs.io/gogs to 0.12.8 or later.","affected":[{"fixed":"0.12.8","introduced":"0"}],"component":"gogs.io/gogs","cve_ids":[],"ecosystem":"Go","exploited":false,"fixed_versions":["0.12.8"],"ghsa_id":"GHSA-pj96-4jhv-v792","id":"tcs_01M5KFVR3D65AV2Z6NEDC04NSB","modified_at":"2026-03-03T04:50:25.674738Z","published_at":"2024-08-21T15:11:33Z","references":["https://osv.dev/vulnerability/GO-2022-0473","https://github.com/gogs/gogs/security/advisories/GHSA-pj96-4jhv-v792","https://github.com/gogs/gogs/issues/6953"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"GO-2022-0473","url":"https://osv.dev/vulnerability/GO-2022-0473"}],"summary":"Cross site scripting via cookies in gogs in gogs.io/gogs"}