Security
فارسی
All products

goshs.de/goshs

Go · Package
9 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
goshs: File-based .goshs ACL authorization bypass via the ?bulk zip-download route (unauthenticated read; residual of GHSA-wvhv-qcqf-f3cx)CVE-2026-54719 · GHSA-RMXW-PQ4X-3FVHVersion ranges need review. github.com/patrickhener/goshs/v2github.com/patrickhener/goshs Go High Fix reported
goshs has a Path Traversal issueCVE-2026-66063 · GHSA-WG2Q-39H6-66X9Version ranges need review. github.com/patrickhener/goshs/v2github.com/patrickhener/goshs Go Medium Fix reported
goshs has ACL Bypass & Path TraversalCVE-2026-66064 · GHSA-964W-F6GJ-5236Version ranges need review. github.com/patrickhener/goshs/v2github.com/patrickhener/goshs Go Medium Fix reported
goshs SFTP authentication bypass via empty password (incomplete fix of CVE-2026-40884)CVE-2026-62325 · GHSA-RJRW-MJQ6-HPMMVersion ranges need review. github.com/patrickhener/goshs/v2goshs.de/goshs/v2 Go Critical Fix reported
goshs --no-delete WebDAV MOVE bypass allows file deletion/overwriteCVE-2026-64863 · GHSA-HQ33-8JGP-8QQ3Version ranges need review. github.com/patrickhener/goshs/v2github.com/patrickhener/goshs Go Critical Fix reported
goshs: Share-link ?token=… redemption races past download limitCVE-2026-50139 · GHSA-J48M-H7XQ-2XPJVersion ranges need review. goshs.de/goshs/v2goshs.de/goshs Go Medium Fix reported
goshs: WebDAV listener ignores --read-only, --upload-only, and --no-delete mode flagsCVE-2026-50138 · GHSA-3WHC-QVHV-XQJPVersion ranges need review. goshs.de/goshs/v2goshs.de/goshs Go High Fix reported
goshs: SSH host key verification disabled, allowing transparent MITM of every tunnelled HTTP requestGHSA-MXG3-432P-MR72 · GO-2026-5519Version ranges need review. goshs.de/goshs/v2goshs.de/goshs Go High Fix reported
goshs has Cross-Origin Arbitrary File Write via Missing CSRF on PUT and Wildcard CORSCVE-2026-42091 · GHSA-RHF7-WVW3-VJVMVersion ranges need review. github.com/patrickhener/goshs/v2github.com/patrickhener/goshs Go Medium Fix reported