tocsin

CVE-2026-66064

7 advisories.

Go/github.com/patrickhener/goshs/v2 CVE-2026-66064: medium 5.3

goshs has ACL Bypass & Path Traversal

Action: Upgrade github.com/patrickhener/goshs/v2 to 2.1.5-0.20260727065949-f3ef599e4091 or later.

go get github.com/patrickhener/goshs/v2@v2.1.5-0.20260727065949-f3ef599e4091

Affected

introducedfixedlast affected
02.1.5-0.20260727065949-f3ef599e4091-

Fixed versions

2.1.5-0.20260727065949-f3ef599e4091

Sources

CVE-2026-66064 · published · modified · JSON

Go/goshs.de/goshs/v2 CVE-2026-66064: medium 5.3

goshs has ACL Bypass & Path Traversal

Action: Upgrade goshs.de/goshs/v2 to 2.1.5-0.20260727065949-f3ef599e4091 or later.

go get goshs.de/goshs/v2@v2.1.5-0.20260727065949-f3ef599e4091

Affected

introducedfixedlast affected
02.1.5-0.20260727065949-f3ef599e4091-

Fixed versions

2.1.5-0.20260727065949-f3ef599e4091

Sources

CVE-2026-66064 · published · modified · JSON

Go/github.com/patrickhener/goshs CVE-2026-66064: medium 5.3

goshs has ACL Bypass & Path Traversal

Action: No fix published. Pin and monitor.

Affected

introducedfixedlast affected
0-1.1.4

Fixed versions

No fixed version in the source.

Sources

CVE-2026-66064 · published · modified · JSON

Go/goshs.de/goshs CVE-2026-66064: medium 5.3

goshs has ACL Bypass & Path Traversal

Action: No fix published. Pin and monitor.

Affected

introducedfixedlast affected
0-1.1.4

Fixed versions

No fixed version in the source.

Sources

CVE-2026-66064 · published · modified · JSON

Go/github.com/patrickhener/goshs CVE-2026-66064: unknown

goshs has ACL Bypass & Path Traversal in github.com/patrickhener/goshs

Action: No fix published. Pin and monitor.

Affected

introducedfixedlast affected
0--

Fixed versions

No fixed version in the source.

Sources

CVE-2026-66064 · published · modified · JSON

Go/goshs.de/goshs CVE-2026-66064: unknown

goshs has ACL Bypass & Path Traversal in github.com/patrickhener/goshs

Action: No fix published. Pin and monitor.

Affected

introducedfixedlast affected
0--

Fixed versions

No fixed version in the source.

Sources

CVE-2026-66064 · published · modified · JSON

Go/goshs.de/goshs/v2 CVE-2026-66064: unknown

goshs has ACL Bypass & Path Traversal in github.com/patrickhener/goshs

Action: Upgrade goshs.de/goshs/v2 to 2.1.5-0.20260727065949-f3ef599e4091 or later.

go get goshs.de/goshs/v2@v2.1.5-0.20260727065949-f3ef599e4091

Affected

introducedfixedlast affected
02.1.5-0.20260727065949-f3ef599e4091-

Fixed versions

2.1.5-0.20260727065949-f3ef599e4091

Sources

CVE-2026-66064 · published · modified · JSON