Most recent entries from all https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 29 Sep 2026 20:47:41 +0000 CVE-2026-26276 — Gogs: DOM-based XSS via milestone selection https://vulnerability.circl.lu/vuln/cve-2026-26276 <p><strong>Affected:</strong> gogs</p> <p>Gogs is an open source self-hosted Git service. Prior to version 0.14.2, an attacker can store an HTML/JavaScript payload in a repository’s Milestone name, and when another user selects that Milestone on the New Issue page (/issues/new), a DOM-Based XSS is triggered. This issue has been patched in version 0.14.2.</p> <p><strong>Affected:</strong> gogs</p> <p>Gogs is an open source self-hosted Git service. Prior to version 0.14.2, an attacker can store an HTML/JavaScript payload in a repository’s Milestone name, and when another user selects that Milestone on the New Issue page (/issues/new), a DOM-Based XSS is triggered. This issue has been patched in version 0.14.2.</p> https://vulnerability.circl.lu/vuln/cve-2026-26276