—
GO-2026-5286
Gitea: Stored XSS via glTF `extensionsRequired` in Gitea 3D File Viewer in code.gitea.io/gitea
Details
Gitea: Stored XSS via glTF `extensionsRequired` in Gitea 3D File Viewer in code.gitea.io/gitea
Are you affected?
Enter the version of the package you're using.
Affected packages
Go / code.gitea.io/gitea
Introduced in:
1.25.0 Fixed in: 1.26.0 Fix
go get code.gitea.io/gitea@v1.26.0