Security Flaw in Gogs Git Service Affects Open Source Users

CVE-2026-26194

What is CVE-2026-26194?

Gogs is an open-source self-hosted Git service that has a vulnerability allowing for potential injection when deleting a release. Specifically, the vulnerability arises when a user-controlled tag name is improperly formatted and passed to git, leading to a failure in the deletion process. This issue permits the injection of git options, potentially disrupting the execution of the operation. The vulnerability has been resolved in version 0.14.2, ensuring users can safely manage their releases without risk of exploitation.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References