VulnSocial

CVE-2026-52796Disclosure

LOWCVSS 3.5 · LOW

Signal is active with 2 mentions in latest observed window

Immediate actions

  • Patch affected systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

Gogs is an open source self-hosted Git service. Prior to 0.14.3, specially crafted issue index pattern can cause a panic when rendering, resulting in denial of service. In internal/markup/markup.go, RenderIssueIndexPattern renders the issue index pattern to a link using com.Expand, which is not safe: when the configured pattern contains an opening brace { but no closing brace }, strings.Index(template, "}") returns -1 and the subsequent slice template[:-1] triggers a panic. Once such a pattern is set, any page in the affected repository that contains an issue index reference such as #1 becomes unavailable. This vulnerability is fixed in 0.14.3.

Back to dashboard
0.5/ 10 priority

Sources & remediation

Other references
Weakness type (CWE)
CWE-1336

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

NONE

Threat summary

  • Patch or workaround signal is available
  • 2 mentions across 1 observed day

What's happening

  • Patch or workaround mentioned in 1 signal
  • Technical details provided in 2 signals
  • Disclosure: 2 classified signals
  • 2 total mentions across 1 day

Deep dive

Activity timeline2 mentions / 1d
01122Mentions · 2026-06-24: 2Patch / Workaround · 2026-06-24: 1Technical Details · 2026-06-24: 206-24
Signal classification1 categories
Disclosure
2100.0%
Referenced assets2 URLs
By indicator
Full discourse2 posts
  • Infoflowcloud@infoflowcloud
    Disclosure

    🚨*CVE* CVE-2026-52796 Gogs is an open source self-hosted Git service. Prior to 0.14.3, specially crafted issue index pattern can cause a panic when rendering, resulting in denial of servic… https://www.cve.org/CVERecord?id=CVE-2026-52796 ----- Traducción: CVE-2026-52796 Gog… http://infoflow.cloud`

    Post summary

    The post announces CVE-2026-52796, a denial‑of‑service flaw in Gogs triggered by crafted issue index patterns, with no PoC, exploit, or patch discussed.

    0000036
    88 followersView on X
  • CVE@CVEnew
    Disclosure

    CVE-2026-52796 Gogs is an open source self-hosted Git service. Prior to 0.14.3, specially crafted issue index pattern can cause a panic when rendering, resulting in denial of servic… https://www.cve.org/CVERecord?id=CVE-2026-52796

    Post summary

    CVE-2026-52796 details a denial-of-service vulnerability in Gogs caused by a crafted issue index pattern; versions prior to 0.14.3 are affected, and the issue is fixed in 0.14.3.

    00000663
    57.7K followersView on X

Explore more

Back to dashboard