blob: 7e3ec363c7c86e24ad17e4a01e965502ceccc3f7 [file]
id: GO-2026-5773
modules:
- module: gogs.io/gogs
non_go_versions:
- fixed: 0.14.3
vulnerable_at: 0.13.3
summary: Gogs has an Open Redirect via redirect_to in gogs.io/gogs
cves:
- CVE-2026-52802
ghsas:
- GHSA-xxhq-69mf-w8cr
references:
- advisory: https://github.com/gogs/gogs/security/advisories/GHSA-xxhq-69mf-w8cr
- web: https://github.com/gogs/gogs/commit/c5da9631dc75f692f313373ae229c4d47ba6517f
- web: https://github.com/gogs/gogs/pull/8322
- web: https://github.com/gogs/gogs/releases/tag/v0.14.3
source:
id: GHSA-xxhq-69mf-w8cr
created: 2026-06-25T15:03:35.838902497-04:00
review_status: UNREVIEWED