{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0"}],"component":"github.com/mickael-kerjean/filestash","cve_ids":["CVE-2026-50891"],"ecosystem":"Go","epss":0.00326,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-rcqf-cpv9-g5jf","id":"tcs_01M5KGT3EZWHR3VEREQBCAQHV8","modified_at":"2026-08-27T20:15:15.834578723Z","published_at":"2026-08-27T19:52:28Z","references":["https://osv.dev/vulnerability/GO-2026-6300","https://github.com/advisories/GHSA-rcqf-cpv9-g5jf","https://nvd.nist.gov/vuln/detail/CVE-2026-50891","https://gist.github.com/pyuysig/50dc365f54f95396bb67532f02b34bb0"],"severity":{"label":"high","score":8.1},"sources":[{"source":"osv","source_id":"GO-2026-6300","url":"https://osv.dev/vulnerability/GO-2026-6300"},{"source":"nvd","source_id":"CVE-2026-50891","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-50891"}],"summary":"Filestash allows attackers to escalate privileges via sending a crafted request in github.com/mickael-kerjean/filestash"}