CVE-2026-52801
Gogs is an open source self-hosted Git service. Prior to 0.14.3, the Gogs Mirror Settings functionality provide an alternative way from the well protected New Migration functionality for any authenticated users to import local repositories. This issue stems from a lack of validation of SaveAddress function. This vulnerability is fixed in 0.14.3.
- Affected products
- Gogs
- CVSS 3.1
- 8.1 HIGH
- EPSS
- 0.4% (34th percentile)
- Weakness
- CWE-20
- NVD status
- Deferred
- Published
- 2026-06-24
CVE-2026-52801 at NVD
No indexed exploits for CVE-2026-52801 yet
Our index is partial: it proves presence, never absence
No exploit for CVE-2026-52801 has been indexed yet. Our index is built from live traffic and upstream syncs, so this page can only say what it knows — not that no exploit exists.