Go/gogs.io/gogs: unknown
Gogs vulnerable to Stored XSS via Mermaid diagrams in gogs.io/gogs
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | - |
Fixed versions
No fixed version in the source.
Sources
- osv: GO-2026-4454
- https://github.com/gogs/gogs/security/advisories/GHSA-26gq-grmh-6xm6
- https://github.com/gogs/gogs/commit/71a72a72ad1c8cea7940c9d7e4cbdfbc0fc3d401
- https://github.com/mermaid-js/mermaid/security/advisories/GHSA-7rqq-prvp-x9jh
- https://github.com/mermaid-js/mermaid/security/advisories/GHSA-8gwm-58g9-j8pw
published · modified · JSON