Token Exposure Vulnerability in Gogs Git Service by Gogs
CVE-2026-26196

6.9MEDIUM

Key Information:

Vendor: Gogs
Status: Gogs
Vendor: CVE Published:; 5 March 2026

What is CVE-2026-26196?

Gogs, an open source self-hosted Git service, has a vulnerability that allows API tokens to be included in URL parameters, such as 'token' and 'access_token'. This exposure can lead to sensitive information being inadvertently leaked through logs, browser history, and referrer headers. Users are advised to upgrade to version 0.14.2 or above to mitigate the risk of unauthorized access.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch