4 matches found
GO-2026-4953 goshs is Missing Write Protection for Parametric Data Values in github.com/patrickhener/goshs
goshs is Missing Write Protection for Parametric Data Values in github.com/patrickhener/goshs...
7.7CVSS7.3AI score0.00318EPSS
SaveExploits1References4
PT-2026-42366
goshs is Missing Write Protection for Parametric Data Values in github.com/patrickhener/goshs...
7.7CVSS7.3AI score0.00318EPSS
SaveExploits1References5
Missing Write Protection for Parametric Data Values
Overview Affected versions of this package are vulnerable to Missing Write Protection for Parametric Data Values through improper sanitization of the destination path in the rename process. An attacker can overwrite files outside the intended root directory by supplying crafted destination paths...
7.7CVSS8.4AI score0.00318EPSS
SaveExploits1References2
20