CVE-2026-35392

goshs is a SimpleHTTPServer written in Go. Prior to 2.0.0-beta.3, PUT upload in httpserver/updown.go has no path sanitization. This vulnerability is fixed in 2.0.0-beta.3...

CVE-2026-35392

creationtimestamp| type| source ---|---|--- 2026-04-02 10:58:39+00:00| published-proof-of-concept| https://github.com/patrickhener/goshs/security/advisories/GHSA-g8mv-vp7j-qp64 2026-04-06 23:22:01+00:00| seen| Telegram/baQtFgKM2b993Xinx1K-rl9rafgMn1ApK9JhHyMaH5eo0M 2026-04-06 23:36:59+00:00| seen...