What’s Vulnerable › Products

goshs-labs goshs vulnerabilities

5 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 5 published in the last 12 months.

Check whether your goshs-labs goshs version is affected

Latest goshs-labs goshs vulnerabilities

• CVE-2026-66064 — goshs has ACL Bypass & Path Traversal (CVSS 5.3)
• CVE-2026-66063 — goshs has a Path Traversal issue (CVSS 6.5)
• CVE-2026-64863 — goshs --no-delete WebDAV MOVE bypass allows file deletion/overwrite (CVSS 9.1)
• CVE-2026-62325 — goshs SFTP authentication bypass via empty password (incomplete fix of CVE-2026-40884) (CVSS 9.1)
• CVE-2026-54719 — goshs: File-based .goshs ACL authorization bypass via the ?bulk zip-download route (unauthenticated read; residual of CVE-2026-40189) (CVSS 7.5)