{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0"}],"component":"gogs.io/gogs","cve_ids":["CVE-2026-52798"],"ecosystem":"Go","epss":0.00429,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-jq8v-rmf6-65jw","id":"tcs_01M5KGMJZZS7FQD3E0KYB06374","modified_at":"2026-06-25T23:01:18.246744302Z","published_at":"2026-06-25T22:34:31Z","references":["https://osv.dev/vulnerability/GO-2026-5477","https://github.com/gogs/gogs/security/advisories/GHSA-jq8v-rmf6-65jw","https://github.com/gogs/gogs/commit/17b168b11ca759a7550e1f4bbd68bbde14db7785","https://github.com/gogs/gogs/pull/8319","https://github.com/gogs/gogs/releases/tag/v0.14.3"],"severity":{"label":"high","score":8.9},"sources":[{"source":"osv","source_id":"GO-2026-5477","url":"https://osv.dev/vulnerability/GO-2026-5477"},{"source":"nvd","source_id":"CVE-2026-52798","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-52798"}],"summary":"Gogs has Stored XSS in `.ipynb` Preview in gogs.io/gogs"}