{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0"}],"component":"github.com/ory/hydra","cve_ids":["CVE-2019-8400"],"ecosystem":"Go","epss":0.01328,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-7v6r-w4r6-mhch","id":"tcs_01M5KGGK9WN4QGYWGKGVDESZ7D","modified_at":"2026-03-26T21:04:11.232859Z","published_at":"2026-03-26T20:33:09Z","references":["https://osv.dev/vulnerability/GO-2026-4861","https://github.com/advisories/GHSA-7v6r-w4r6-mhch","https://nvd.nist.gov/vuln/detail/CVE-2019-8400","https://github.com/ory/hydra/commit/9b5bbd48a72096930af08402c5e07fce7dd770f3","https://drive.google.com/file/d/1-25expUYVfK6vsiCmEabUCuelOP7aUDj/view?usp=drivesdk","https://github.com/ory/hydra/blob/master/CHANGELOG.md#v100-rc3oryos9-2018-12-06","https://hackerone.com/reports/456333","https://www.youtube.com/watch?v=RIyZLeKEC8E"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"GO-2026-4861","url":"https://osv.dev/vulnerability/GO-2026-4861"}],"summary":"Hydra has Reflected XSS via error_hint parameter in github.com/ory/hydra"}