Beveiligingsadvies

CVE-2026-35392

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-04-06 20:48:56
Laatst bijgewerkt 2026-04-07 16:19:28
Toegewezen door GitHub_M
CVSS-score 9.8
Status PUBLISHED

Beschrijving

goshs is a SimpleHTTPServer written in Go. Prior to 2.0.0-beta.3, PUT upload in httpserver/updown.go has no path sanitization. This vulnerability is fixed in 2.0.0-beta.3.