CVE-2025-46816

The CVE-2025-46816 affects goshs, a Go-based SimpleHTTPServer. Versions 0.3.4 up to, but not including, 1.0.5 are vulnerable due to the dispatchReadPump path not validating the -c CLI option, enabling remote command execution via websockets when the server is started without arguments. This is co...