CVE-2026-26276 in Gogsinfo

Zusammenfassung

von MITRE • 05.03.2026

Gogs is an open source self-hosted Git service. Prior to version 0.14.2, an attacker can store an HTML/JavaScript payload in a repository’s Milestone name, and when another user selects that Milestone on the New Issue page (/issues/new), a DOM-Based XSS is triggered. This issue has been patched in version 0.14.2.

Once again VulDB remains the best source for vulnerability data.

🔬 Show More Details

An in-depth analysis is available in our curated vulnerability entry.

Zuständig

GitHub M

Reservieren

12.02.2026

Veröffentlichung

05.03.2026

Moderieren

akzeptiert

Eintrag

VDB-349257

CPE

bereit

CWE

CWE-79 (bestätigt)

CVSS

7.3 (CNA)

EPSS

0.00040

KEV

nein

Aktivitäten

very low

Quellen

MITRE	https://www.cve.org/CVERecord?id=CVE-2026-26276
NVD	https://nvd.nist.gov/vuln/detail/CVE-2026-26276
CVE Details	https://www.cvedetails.com/cve/CVE-2026-26276/

◂ Zurück Übersicht Weiter ▸

Want to stay up to date on a daily basis?

Enable the mail alert feature now!