SUSE CVE-2026-35471

goshs is a SimpleHTTPServer written in Go. Prior to 2.0.0-beta.3, tdeleteFile missing return after path traversal check. This vulnerability is fixed in 2.0.0-beta.3...

CVE-2026-35471

creationtimestamp| type| source ---|---|--- 2026-04-01 17:29:12+00:00| published-proof-of-concept| https://github.com/patrickhener/goshs/security/advisories/GHSA-6qcc-6q27-whp8 2026-04-06 22:51:19+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3miue2nxbnm2o 2026-04-06 23:22:19+00:00...