Количество 2
Количество 2
CVE-2026-66063
goshs is a feature-rich single-binary file server for red teamers and developers. Prior to 2.1.5, the httpserver/updown.go multipart upload handler split part.FileName() on / but did not reject .., allowing an unauthenticated upload with filename .. to create a file outside the served tree. This issue is fixed in version 2.1.5.
GHSA-wg2q-39h6-66x9
goshs has a Path Traversal issue
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2026-66063 goshs is a feature-rich single-binary file server for red teamers and developers. Prior to 2.1.5, the httpserver/updown.go multipart upload handler split part.FileName() on / but did not reject .., allowing an unauthenticated upload with filename .. to create a file outside the served tree. This issue is fixed in version 2.1.5. | CVSS3: 6.5 | 0% Низкий | 10 дней назад |
| GHSA-wg2q-39h6-66x9 goshs has a Path Traversal issue | CVSS3: 6.5 | 0% Низкий | 10 дней назад |
Уязвимостей на страницу