{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"0.2.2-0.20260827111952-cbcd1e96ebc7"}],"component":"github.com/mickael-kerjean/filestash","cve_ids":["CVE-2026-50891"],"ecosystem":"Go","epss":0.00326,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-rcqf-cpv9-g5jf","id":"tcs_01M5KFMHNMS5MX925CH64MRXMT","modified_at":"2026-08-27T20:25:33.418609260Z","published_at":"2026-06-15T21:30:42Z","references":["https://osv.dev/vulnerability/GHSA-rcqf-cpv9-g5jf","https://nvd.nist.gov/vuln/detail/CVE-2026-50891","https://gist.github.com/pyuysig/50dc365f54f95396bb67532f02b34bb0","https://github.com/mickael-kerjean/filestash"],"severity":{"label":"high","score":8.1},"sources":[{"source":"osv","source_id":"GHSA-rcqf-cpv9-g5jf","url":"https://osv.dev/vulnerability/GHSA-rcqf-cpv9-g5jf"}],"summary":"Filestash allows attackers to escalate privileges via sending a crafted request"}