{"action":"Upgrade gogs.io/gogs to 0.13.3 or later.","affected":[{"fixed":"0.13.3","introduced":"0"}],"component":"gogs.io/gogs","cve_ids":["CVE-2024-56731"],"ecosystem":"Go","epss":0.0115,"exploited":false,"fixed_versions":["0.13.3"],"ghsa_id":"GHSA-wj44-9vcg-wjq7","id":"tcs_01M5KG93ZEW6KQFDSRA9N6G3W1","modified_at":"2026-03-03T04:57:20.223991Z","published_at":"2025-07-28T19:57:13Z","references":["https://osv.dev/vulnerability/GO-2025-3776","https://github.com/gogs/gogs/security/advisories/GHSA-wj44-9vcg-wjq7","https://nvd.nist.gov/vuln/detail/CVE-2024-56731","https://github.com/advisories/GHSA-ccqv-43vm-4f3w","https://github.com/gogs/gogs/commit/77a4a945ae9a87f77e392e9066b560edb71b5de9","https://github.com/gogs/gogs/releases/tag/v0.13.3"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GO-2025-3776","url":"https://osv.dev/vulnerability/GO-2025-3776"},{"source":"nvd","source_id":"CVE-2024-56731","url":"https://nvd.nist.gov/vuln/detail/CVE-2024-56731"}],"summary":"Gogs allows deletion of internal files which leads to remote command execution in gogs.io/gogs"}