{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0"}],"component":"gogs.io/gogs","cve_ids":["CVE-2025-8110"],"ecosystem":"Go","epss":0.85202,"exploited":true,"fixed_versions":[],"ghsa_id":"GHSA-mq8m-42gh-wq7r","id":"tcs_01M5KGCDSZREV0YXW4NN70W9Q7","modified_at":"2026-03-03T04:57:49.010975Z","published_at":"2025-12-15T20:15:46Z","references":["https://osv.dev/vulnerability/GO-2025-4225","https://github.com/advisories/GHSA-mq8m-42gh-wq7r","https://nvd.nist.gov/vuln/detail/CVE-2025-8110","http://wiz.io/blog/wiz-research-gogs-cve-2025-8110-rce-exploit","http://www.openwall.com/lists/oss-security/2025/12/11/3","http://www.openwall.com/lists/oss-security/2025/12/11/4"],"severity":{"label":"high","score":8.8},"sources":[{"source":"osv","source_id":"GO-2025-4225","url":"https://osv.dev/vulnerability/GO-2025-4225"},{"source":"kev","source_id":"CVE-2025-8110","url":"https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json"},{"source":"nvd","source_id":"CVE-2025-8110","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-8110"}],"summary":"Gogs vulnerable to a bypass of CVE-2024-55947 in gogs.io/gogs"}