{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0"}],"component":"gogs.io/gogs","cve_ids":["CVE-2026-52800"],"ecosystem":"Go","epss":0.00248,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-pwx3-qcgw-vh7h","id":"tcs_01M5KGN6W0V5840VXAXC9QHARB","modified_at":"2026-06-25T23:01:30.753204337Z","published_at":"2026-06-25T22:34:34Z","references":["https://osv.dev/vulnerability/GO-2026-5556","https://github.com/gogs/gogs/security/advisories/GHSA-pwx3-qcgw-vh7h","https://github.com/gogs/gogs/commit/070df61ecd14c75b0aca93090f860b87ab17ac19","https://github.com/gogs/gogs/pull/8321","https://github.com/gogs/gogs/releases/tag/v0.14.3"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"GO-2026-5556","url":"https://osv.dev/vulnerability/GO-2026-5556"}],"summary":"Gogs Vulnerable to CSRF Leading to Organization Owner Takeover in gogs.io/gogs"}