Vulnerability advisory
GO-2026-4619
Gogs: Access tokens get exposed through URL params in API requests in gogs.io/gogs
Also known as CVE-2026-26196GHSA-x9p5-w45c-7ffc
Severity
Severity not reported.
Affected versions
| Affected | Fixed in |
|---|---|
| All versions | No fix listed |
Description
Gogs: Access tokens get exposed through URL params in API requests in gogs.io/gogs