CVE-2026-26195 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

Gogs is an open source self-hosted Git service. Prior to version 0.14.2, stored xss is still possible through unsafe template rendering that mixes user input wi…
Medium CVSS: 6.9

CVE-2026-26195

Gogs is an open source self-hosted Git service. Prior to version 0.14.2, stored xss is still possible through unsafe template rendering that mixes user input with safe plus permissive sanitizer handling of data urls. This issue has been patched in version 0.14.2.
Vendor
Gogs
Product
Gogs
CWE
CWE-79
Yayın Tarihi
2026-03-05 19:16:03
Güncelleme
2026-03-06 13:40:19
Source Identifier
security-advisories@github.com
KEV Date Added
-

Kategoriler

CWE-79 Gogs MEDIUM Gogs 2026

Referanslar

https://github.com/gogs/gogs/commit/ac21150a53bef3a3061f4da787ab193a8d68ecfc https://github.com/gogs/gogs/pull/8176 https://github.com/gogs/gogs/releases/tag/v0.14.2 https://github.com/gogs/gogs/security/advisories/GHSA-vgvf-m4fw-938j