Go/goshs.de/goshs: unknown

goshs: SSH host key verification disabled, allowing transparent MITM of every tunnelled HTTP request in goshs.de/goshs

Action: No fix published. Pin and monitor.

Affected

Fixed versions

No fixed version in the source.

Sources

• osv: GO-2026-5519
• https://github.com/patrickhener/goshs/security/advisories/GHSA-mxg3-432p-mr72
• https://github.com/patrickhener/goshs/commit/8f409cb08aacc6e94704334e8b1fb2cd50f5dd98
• https://github.com/patrickhener/goshs/releases/tag/v2.0.7

published 2026-06-25T22:34:34Z · modified 2026-06-25T23:01:22.079980127Z · JSON