HIGH8.2Go
GHSA-4c8j-mgm4-qqvp· CVE-2026-48788, GO-2026-5804Remark42: Cross-Site Scripting (XSS) on /api/v1/img via content-type spoofing
Modified: 7/7/2026
package
Go/github.com/umputun/remark42
pkg:go/github.com/umputun/remark42
—Go
GO-2026-5804· CVE-2026-48788, GHSA-4c8j-mgm4-qqvpRemark42: Cross-Site Scripting (XSS) on /api/v1/img via content-type spoofing in github.com/umputun/remark42
Modified: 7/7/2026