CVE-2026-52816
MediumCVSS 5.4Exploitation Probability (EPSS)
Low risk48th percentile — higher than 48% of all known CVEs
Summary
Gogs is an open source Git service that prior to version 0.14.3 had a vulnerability in the Jupyter Notebook (ipynb) sanitizer endpoint at POST /-/api/sanitize_ipynb. This vulnerability allowed arbitrary data URIs to be submitted without proper restrictions, potentially leading to Cross-Site Scripting (XSS) attacks.
Risk Assessment
Organizations may be exposed to XSS attacks that could lead to user data theft or session hijacking. The lack of authentication middleware allows any registered user to exploit this vulnerability.
Recommendation
It is recommended to update Gogs to version 0.14.3 or later to mitigate this vulnerability. Additionally, implementing proper authorization mechanisms for API endpoints is advisable.
Original NVD description (English source)
Gogs is an open source self-hosted Git service. Prior to 0.14.3, the Jupyter Notebook (ipynb) sanitizer endpoint at POST /-/api/sanitize_ipynb allows arbitrary data: URIs without proper restrictions, potentially leading to Cross-Site Scripting (XSS). The endpoint uses bluemonday.UGCPolicy() with p.AllowURLSchemes("data") which permits all data URI schemes including data:text/html, enabling attackers to inject malicious HTML/JavaScript. Additionally, the endpoint has no authentication middleware, allowing any registered user to exploit this vulnerability. This vulnerability is fixed in 0.14.3.