{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0"}],"component":"gogs.io/gogs","cve_ids":[],"ecosystem":"Go","exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-26gq-grmh-6xm6","id":"tcs_01M5KGDTW87RK59C8QFA301Y51","modified_at":"2026-02-19T20:41:26.142855Z","published_at":"2026-02-17T18:09:06Z","references":["https://osv.dev/vulnerability/GO-2026-4454","https://github.com/gogs/gogs/security/advisories/GHSA-26gq-grmh-6xm6","https://github.com/gogs/gogs/commit/71a72a72ad1c8cea7940c9d7e4cbdfbc0fc3d401","https://github.com/mermaid-js/mermaid/security/advisories/GHSA-7rqq-prvp-x9jh","https://github.com/mermaid-js/mermaid/security/advisories/GHSA-8gwm-58g9-j8pw"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"GO-2026-4454","url":"https://osv.dev/vulnerability/GO-2026-4454"}],"summary":"Gogs vulnerable to Stored XSS via Mermaid diagrams in gogs.io/gogs"}