Go/github.com/patrickhener/goshs/v2: unknown 0
Unauthenticated Open Redirect, Arbitrary HTTP Response Header Injection, Missing CSRF, and Invisible-Mode Bypass in goshs `/?redirect` endpoint
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 2.0.0-beta.6 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-7qx6-f23w-3w7f#Go/github.com/patrickhener/goshs/v2
- https://github.com/patrickhener/goshs/security/advisories/GHSA-7qx6-f23w-3w7f
- https://github.com/patrickhener/goshs
published · modified · JSON