Security Advisories for github.com/patrickhener/goshs in go
Moderate
10 days ago
goshs has ACL Bypass & Path Traversal
go
goshs.de/goshs, github.com/patrickhener/goshs, goshs.de/goshs/v2, github.com/patrickhener/goshs/v2
Moderate
10 days ago
goshs has a Path Traversal issue
go
github.com/patrickhener/goshs/v2, goshs.de/goshs/v2, github.com/patrickhener/goshs, goshs.de/goshs
Critical
10 days ago
goshs --no-delete WebDAV MOVE bypass allows file deletion/overwrite
go
github.com/patrickhener/goshs, goshs.de/goshs, github.com/patrickhener/goshs/v2, goshs.de/goshs/v2
High
10 days ago
goshs: File-based .goshs ACL authorization bypass via the ?bulk zip-download route (unauthenticated read; residual of GHSA-wvhv-qcqf-f3cx)
go
github.com/patrickhener/goshs/v2, github.com/patrickhener/goshs
Moderate
4 months ago
goshs has Cross-Origin Arbitrary File Write via Missing CSRF on PUT and Wildcard CORS
go
github.com/patrickhener/goshs, github.com/patrickhener/goshs/v2
Low
4 months ago
Unauthenticated Open Redirect, Arbitrary HTTP Response Header Injection, Missing CSRF, and Invisible-Mode Bypass in goshs `/?redirect` endpoint
go
github.com/patrickhener/goshs/v2, github.com/patrickhener/goshs
Critical
4 months ago
goshs has an empty-username SFTP password authentication bypass
go
github.com/patrickhener/goshs/v2, github.com/patrickhener/goshs
High
4 months ago
SFTP root escape via prefix-based path validation in goshs
go
github.com/patrickhener/goshs/v2, github.com/patrickhener/goshs
Critical
4 months ago
goshs has a file-based ACL authorization bypass in goshs state-changing routes
go
github.com/patrickhener/goshs
High
4 months ago
goshs is Missing Write Protection for Parametric Data Values
go
github.com/patrickhener/goshs
Critical
4 months ago
goshs: Improper Limitation of a Pathname to a Restricted Directory (Path Traversal)
go
github.com/patrickhener/goshs
Critical
4 months ago
goshs: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in goshs POST multipart upload
go
github.com/patrickhener/goshs
Critical
4 months ago
goshs: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in goshs PUT Upload
go
github.com/patrickhener/goshs
Critical
over 1 year ago
goshs route not protected, allows command execution
go
github.com/patrickhener/goshs