Go/github.com/patrickhener/goshs: unknown 0

Unauthenticated Open Redirect, Arbitrary HTTP Response Header Injection, Missing CSRF, and Invisible-Mode Bypass in goshs `/?redirect` endpoint

Action: No fix published. Pin and monitor.

Affected

Fixed versions

No fixed version in the source.

Sources

• osv: GHSA-7qx6-f23w-3w7f
• https://github.com/patrickhener/goshs/security/advisories/GHSA-7qx6-f23w-3w7f
• https://github.com/patrickhener/goshs

published 2026-04-14T22:53:33Z · modified 2026-06-25T19:56:39.498790581Z · JSON