CVE-2020-35305: Gollum Project Gollum

Medium severity, CVSS 6.1. EPSS: 0.8% chance of exploitation in the next 30 days.

Cross site scripting (XSS) in gollum 5.0 to 5.1.2 via the filename parameter to the 'New Page' dialog.

Affected products

• Gollum Project Gollum: from 5.0.0, up to and including 5.1.2

Published 2022-07-15. Last modified 2026-07-09.