CVE-2026-48788
2 advisories.
Go/github.com/umputun/remark42 CVE-2026-48788: high 8.2
Remark42: Cross-Site Scripting (XSS) on /api/v1/img via content-type spoofing
Action: Upgrade github.com/umputun/remark42 to 1.16.0 or later.
go get github.com/umputun/remark42@v1.16.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 1.6.0 | 1.16.0 | - |
Fixed versions
| 1.16.0 |
Sources
- osv: GHSA-4c8j-mgm4-qqvp
- https://github.com/umputun/remark42/security/advisories/GHSA-4c8j-mgm4-qqvp
- https://nvd.nist.gov/vuln/detail/CVE-2026-48788
- https://github.com/umputun/remark42/commit/78d6de6bce1e961f023969da3ec8a00dd80c9ae8
- https://github.com/umputun/remark42
- https://github.com/umputun/remark42/releases/tag/v1.16.0
CVE-2026-48788 · published · modified · JSON
Go/github.com/umputun/remark42 CVE-2026-48788: unknown
Remark42: Cross-Site Scripting (XSS) on /api/v1/img via content-type spoofing in github.com/umputun/remark42
Action: Upgrade github.com/umputun/remark42 to 1.16.0 or later.
go get github.com/umputun/remark42@v1.16.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 1.6.0 | 1.16.0 | - |
Fixed versions
| 1.16.0 |
Sources
- osv: GO-2026-5804
- https://github.com/umputun/remark42/security/advisories/GHSA-4c8j-mgm4-qqvp
- https://nvd.nist.gov/vuln/detail/CVE-2026-48788
- https://github.com/umputun/remark42/commit/78d6de6bce1e961f023969da3ec8a00dd80c9ae8
- https://github.com/umputun/remark42/releases/tag/v1.16.0
CVE-2026-48788 · published · modified · JSON