Security Advisory catalog GO-2026-6134 GO-2026-6134 Published
goshs has ACL Bypass & Path Traversal Overview Affected History Connections
cve-program · CVE-2026-66064 Published goshs Vendor product
Original vendor version evidence · not evaluated as a NuGet range {
"vendor": "goshs-labs",
"product": "goshs",
"versions": [
{
"version": "< 2.1.5",
"status": "affected"
}
]
}
nvd · CVE-2026-66064 Published No affected-package array is stated in this source revision. Check its state and earlier observations; this does not establish that every package is unaffected.
osv · GHSA-964w-f6gj-5236 Published github.com/patrickhener/goshs/v2 Go
SEMVER · introduced 0 → fixed 2.1.5-0.20260727065949-f3ef599e4091
goshs.de/goshs/v2 Go
SEMVER · introduced 0 → fixed 2.1.5-0.20260727065949-f3ef599e4091
github.com/patrickhener/goshs Go
SEMVER · introduced 0 → last_affected 1.1.4
goshs.de/goshs Go
SEMVER · introduced 0 → last_affected 1.1.4
osv · GO-2026-6134 Published github.com/patrickhener/goshs Go
SEMVER · introduced 0
goshs.de/goshs Go
SEMVER · introduced 0
goshs.de/goshs/v2 Go
SEMVER · introduced 0 → fixed 2.1.5-0.20260727065949-f3ef599e4091