Go/goshs.de/goshs/v2 CVE-2026-50138: unknown, EPSS 0.38%

goshs: WebDAV listener ignores --read-only, --upload-only, and --no-delete mode flags in goshs.de/goshs

Action: Upgrade goshs.de/goshs/v2 to 2.1.0 or later.

go get goshs.de/goshs/v2@v2.1.0

Affected

Fixed versions

Sources

• osv: GO-2026-5878#Go/goshs.de/goshs/v2
• https://github.com/patrickhener/goshs/security/advisories/GHSA-3whc-qvhv-xqjp

CVE-2026-50138 · published 2026-07-07T15:26:37Z · modified 2026-07-07T16:01:31.264609966Z · JSON