{"action":"Upgrade gogs.io/gogs to 0.5.8 or later.","affected":[{"fixed":"0.5.8","introduced":"0.3.1"}],"component":"gogs.io/gogs","cve_ids":["CVE-2014-8683"],"ecosystem":"Go","epss":0.01909,"exploited":false,"fixed_versions":["0.5.8"],"ghsa_id":"GHSA-9hx4-qm7h-x84j","id":"tcs_01M5KFWHTBBVFMZRAYWZS7YF49","modified_at":"2026-03-03T04:50:49.566428Z","published_at":"2024-08-21T15:21:45Z","references":["https://osv.dev/vulnerability/GO-2022-0642","https://github.com/advisories/GHSA-9hx4-qm7h-x84j","https://nvd.nist.gov/vuln/detail/CVE-2014-8683","https://exchange.xforce.ibmcloud.com/vulnerabilities/98693","https://github.com/gogits/gogs/commit/3abc41cccab2486012b46305827433ad6f5deade","https://github.com/gogits/gogs/releases/tag/v0.5.8","https://packetstormsecurity.com/files/129118/Gogs-Markdown-Renderer-Cross-Site-Scripting.html","https://seclists.org/fulldisclosure/2014/Nov/31","https://seclists.org/fulldisclosure/2014/Nov/34"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"GO-2022-0642","url":"https://osv.dev/vulnerability/GO-2022-0642"}],"summary":"Cross-site Scripting in Gogs in gogs.io/gogs"}