Beveiligingsadvies

CVE-2026-40903

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-04-21 19:43:36

Laatst bijgewerkt 2026-04-22 13:45:41

Toegewezen door GitHub_M

CVSS-score 9.1

Status PUBLISHED

Beschrijving

goshs is a SimpleHTTPServer written in Go. Prior to 2.0.0-beta.6, goshs has an ArtiPACKED vulnerability. ArtiPACKED can lead to leakage of the GITHUB_TOKEN through workflow artifacts, even though the token is not present in the repository source code. This vulnerability is fixed in 2.0.0-beta.6.

← Alle CVE's bekijken Bekijk op cve.org ↗