CVE-2026-52816 | Gogs up to 0.14.2 /-/api/sanitize_ipynb bluemonday.UGCPolicy cross site scripting (GHSA-3w28-36p9-w929)

June 25, 2026 Yanac

A vulnerability was found in Gogs up to 0.14.2. It has been rated as problematic. Impacted is the function bluemonday.UGCPolicy of the file /-/api/sanitize_ipynb. Performing a manipulation results in basic cross site scripting.

This vulnerability was named CVE-2026-52816. The attack may be initiated remotely. There is no available exploit.

Upgrading the affected component is advised.VulDB Recent EntriesRead More