Executive brief
Gogs: XSS in .ipynb files renderer due to outdated notebookjs in gogs.io/gogs
Affected products
- Go gogs.io/gogs
Junglewise Threat Intelligence
GO-2026-5193 - Gogs: XSS in .ipynb files renderer due to outdated notebookjs in gogs.io/gogs
Severity: info ยท Published 2026-06-25
Technologies: gogs.io/gogs (Go). Vendors: Go.
Related threats
- Gogs stored XSS in Jupyter Notebook sanitizer endpoint
- Gogs unauthenticated information disclosure in organization teams API
- Gogs Denial of Service via SSH handshake stall in built-in SSH server
- Gogs path traversal and RCE via organization names
- Gogs Git LFS cross-repository disclosure via insufficient OID verification