Skip to content
OpenAdvisories

Package · Go

github.com/patrickhener/goshs

17 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.4
    CVE-2025-46816 Public exploit

    goshs route not protected, allows command execution

    goshs is a SimpleHTTPServer written in Go. Starting in version 0.3.4 and prior to version 1.0.5, running goshs without arguments makes it possible for anyone to execute commands on the server. The function `dispatchReadPump` does not checks the option cli `-c…

    patrickhener goshs github.com/patrickhener/goshs Go