CVE-2026-52798 | Gogs up to 0.14.2 /-/api/sanitize_ipynb marked cross site scripting (GHSA-jq8v-rmf6-65jw)

June 25, 2026 Yanac

A vulnerability classified as problematic has been found in Gogs up to 0.14.2. The impacted element is the function marked of the file /-/api/sanitize_ipynb. The manipulation leads to cross site scripting.

This vulnerability is traded as CVE-2026-52798. It is possible to initiate the attack remotely. There is no exploit available.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More