https://advisories.gitlab.com/golang/github.com/patrickhener/goshs/v2/GHSA-rhf7-wvw3-vjvm/
goshs has Cross-Origin Arbitrary File Write via Missing CSRF on PUT and Wildcard CORS | GitLab...
GHSA-rhf7-wvw3-vjvm goshs has Cross-Origin Arbitrary File Write via Missing CSRF on PUT and Wildcard CORS: The PUT upload handler (httpserver/updown.go) lacks...
cross origingoshsarbitraryfilewrite
https://www.sentinelone.com/vulnerability-database/cve-2026-40876/
CVE-2026-40876: goshs SFTP Path Traversal Vulnerability
CVE-2026-40876 is a path traversal vulnerability in goshs SFTP server. Learn about its impact, affected versions, and mitigation methods.
path traversalcvegoshssftpvulnerability
https://cvefeed.io/vuln/detail/CVE-2026-42091
CVE-2026-42091 - goshs has Cross-Origin Arbitrary File Write via Missing CSRF on PUT and Wildcard...
May 12, 2026 - goshs is a SimpleHTTPServer written in Go. Prior to version 2.0.2, the PUT upload handler (httpserver/updown.go) lacks the CSRF token validation that was added...
cross origincvegoshsarbitraryfile