goshs-labs/goshs Security Advisories | GitStock

medium2026-07-28

goshs has ACL Bypass & Path Traversal

GHSA-964w-f6gj-5236 · CVE-2026-66064

medium2026-07-28

goshs has a Path Traversal issue

GHSA-wg2q-39h6-66x9 · CVE-2026-66063

critical2026-07-28

goshs --no-delete WebDAV MOVE bypass allows file deletion/overwrite

GHSA-hq33-8jgp-8qq3 · CVE-2026-64863

high2026-07-28

goshs: File-based .goshs ACL authorization bypass via the ?bulk zip-download route (unauthenticated read; residual of GHSA-wvhv-qcqf-f3cx)

GHSA-rmxw-pq4x-3fvh · CVE-2026-54719

critical2026-07-28

goshs SFTP authentication bypass via empty password (incomplete fix of CVE-2026-40884)

GHSA-rjrw-mjq6-hpmm · CVE-2026-62325