Stored XSS Vulnerability in Gogs Open Source Git Service
CVE-2026-26195

6.9MEDIUM

Key Information:

Vendor: Gogs
Status: Gogs
Vendor: CVE Published:; 5 March 2026

What is CVE-2026-26195?

Gogs, the open source self-hosted Git service, suffers from a stored cross-site scripting (XSS) vulnerability due to unsafe template rendering that allows mixing user input with inadequately sanitized data URLs. This flaw could potentially enable malicious users to execute arbitrary script code on a victim's browser. The vulnerability has been addressed in version 0.14.2, which implements safer handling of user inputs.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch