CVE-2026-52796

Go/gogs.io/gogs CVE-2026-52796: low 3.5, EPSS 0.28%

Gogs has DoS in rendering issue index pattern

Action: Upgrade gogs.io/gogs to 0.14.3 or later.

go get gogs.io/gogs@v0.14.3

Affected

Fixed versions

Sources

• osv: GHSA-4j89-2c4f-44c6
• https://github.com/gogs/gogs/security/advisories/GHSA-4j89-2c4f-44c6
• https://nvd.nist.gov/vuln/detail/CVE-2026-52796
• https://github.com/gogs/gogs/pull/8312
• https://github.com/gogs/gogs/commit/0529d95fc39f2b6d2997b19a2a12e24522684722
• https://github.com/gogs/gogs
• https://github.com/gogs/gogs/releases/tag/v0.14.3

CVE-2026-52796 · published 2026-06-22T23:58:17Z · modified 2026-07-21T13:30:31.792639325Z · JSON

Go/gogs.io/gogs CVE-2026-52796: unknown, EPSS 0.28%

Gogs has DoS in rendering issue index pattern in gogs.io/gogs

Action: No fix published. Pin and monitor.

Affected

Fixed versions

No fixed version in the source.

Sources

• osv: GO-2026-5124
• https://github.com/gogs/gogs/security/advisories/GHSA-4j89-2c4f-44c6
• https://github.com/gogs/gogs/commit/0529d95fc39f2b6d2997b19a2a12e24522684722
• https://github.com/gogs/gogs/pull/8312
• https://github.com/gogs/gogs/releases/tag/v0.14.3

CVE-2026-52796 · published 2026-06-25T18:26:48Z · modified 2026-06-25T18:45:23.711845921Z · JSON