Vulnerability advisory
GO-2025-3778
Gogs XSS allowed by stored call in PDF renderer in gogs.io/gogs
Also known as CVE-2025-47943GHSA-xh32-cx6c-cp4v
Severity
Severity not reported.
Affected versions
| Affected | Fixed in |
|---|---|
| All versions before 0.13.3-0.20250608224432-110117b2e5e5 | 0.13.3-0.20250608224432-110117b2e5e5 |
Description
Gogs XSS allowed by stored call in PDF renderer in gogs.io/gogs