CVE-2026-104587

The blob42 gosuki application (through commit 6e2bf34 ) is vulnerable to a Stored Cross-Site Scripting (XSS) vulnerability. The root cause is the use of text/template instead of html/template in the internal/webui/templates/bookmarks.html file, which fails to perform context-aware auto-escaping o...