6 matches found
CVE-2026-38600
A Zip Slip vulnerability in the /upload endpoint of codeskyblue gohttpserver through v1.3.0 allows attackers to write arbitrary files via uploading a crafted Zip archive...
CVE-2026-38600
A Zip Slip vulnerability in the /upload endpoint of codeskyblue gohttpserver through v1.3.0 allows attackers to write arbitrary files via uploading a crafted Zip archive...
CVE-2026-38600
The gohttpserver software by codeskyblue is vulnerable to a Zip Slip vulnerability in its /upload endpoint through version v1.3.0 . This flaw allows an attacker to write arbitrary files on the system by uploading a crafted Zip archive . No specific remediation or exploit information is provided i...
EUVD-2026-116105
A hardcoded session secret key in codeskyblue gohttpserver through v1.3.0 allows attackers to impersonate any user, bypass OpenID Connect authentication and access all controls via forged session cookies...
CVE-2026-38601
The codeskyblue gohttpserver (through version v1.3.0 ) contains a hardcoded session secret key . This vulnerability allows an attacker to forge session cookies, leading to the ability to impersonate any user , bypass OpenID Connect authentication , and gain access to all controls. No specific rem...