{"id":"GO-2026-4953","revision":"5038b3f214ab452c83cdd415a44e91c1","records":[{"revision":"5038b3f214ab452c83cdd415a44e91c1","observedAt":"2026-10-24T13:19:41.952+00:00","statement":{"source":"osv","id":"GO-2026-4953","aliases":["CVE-2026-40188","GHSA-2943-crp8-38xx"],"title":"goshs is Missing Write Protection for Parametric Data Values in github.com/patrickhener/goshs","description":"goshs is Missing Write Protection for Parametric Data Values in github.com/patrickhener/goshs","state":0,"publishedAt":"2026-05-20T19:07:16+00:00","modifiedAt":"2026-05-20T19:30:11.5335781+00:00","affected":[{"ecosystem":"Go","name":"github.com/patrickhener/goshs","ranges":[{"type":"SEMVER","events":[{"kind":"introduced","version":"1.0.7"}]}],"versions":[],"rawVersionEvidence":null}],"metrics":[],"references":["https://github.com/patrickhener/goshs/security/advisories/GHSA-2943-crp8-38xx","https://nvd.nist.gov/vuln/detail/CVE-2026-40188","https://github.com/patrickhener/goshs/commit/141c188ce270ffbec087844a50e5e695b7da7744","https://github.com/patrickhener/goshs/releases/tag/v2.0.0-beta.4"],"sourceUrl":"https://osv.dev/vulnerability/GO-2026-4953","license":"OSV · upstream source license applies","key":"osv:GO-2026-4953","identifiers":["GO-2026-4953","CVE-2026-40188","GHSA-2943-crp8-38xx"]},"retained":false,"historicalAffected":[]}],"coverage":[]}