goshs kayıtları
goshs üreticisine ait 12 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 0
- Düzeltme kaydı olan
- %100
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')4
- CWE-352 Cross-Site Request Forgery (CSRF)2
- CWE-288 Authentication Bypass Using an Alternate Path or Channel1
- CWE-306 Missing Authentication for Critical Function1
- CWE-829 Inclusion of Functionality from Untrusted Control Sphere1
- CWE-1314 Missing Write Protection for Parametric Data Values1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
12 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
39İzleyin | CVE-2026-35471İstismar yok | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in goshsgoshs · goshs · CWE-22 | Kritik9,8 | — | %0,7 | 6 Nis 2026 |
39İzleyin | CVE-2026-35392İstismar yok | goshs has an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in goshs PUT Uploadgoshs · goshs · CWE-22 | Kritik9,8 | — | %0,7 | 6 Nis 2026 |
39İzleyin | CVE-2026-35393İstismar yok | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in goshs POST multipart uploadgoshs · goshs · CWE-22 | Kritik9,8 | — | %0,7 | 6 Nis 2026 |
39İzleyin | CVE-2026-40884İstismar yok | goshs: Empty-username SFTP password authentication bypass in goshsgoshs · goshs · CWE-306 | Kritik9,8 | — | %0,6 | 21 Nis 2026 |
37İzleyin | CVE-2026-40189İstismar yok | goshs has a file-based ACL authorization bypass in goshs state-changing routesgoshs · goshs · CWE-862 | Kritik9,3 | — | %0,7 | 10 Nis 2026 |
36İzleyin | CVE-2026-40903İstismar yok | Goshs - ArtiPACKED Vulnerability – GitHub Actions Credential Persistencegoshs · goshs · CWE-829 | Kritik9,1 | — | %0,4 | 21 Nis 2026 |
34İzleyin | CVE-2026-40876İstismar yok | SFTP root escape via prefix-based path validation in goshsgoshs · goshs · CWE-22 | Yüksek8,7 | — | %0,6 | 21 Nis 2026 |
32İzleyin | CVE-2026-34581İstismar yok | goshs has Auth Bypass via Share Tokengoshs · goshs · CWE-288 | Yüksek8,1 | — | %0,5 | 2 Nis 2026 |
30İzleyin | CVE-2026-40885İstismar yok | goshs: Public collaborator feed leaks .goshs ACL credentials and enables unauthorized accessgoshs · goshs · CWE-200 | Yüksek7,7 | — | %0,5 | 21 Nis 2026 |
30İzleyin | CVE-2026-40188İstismar yok | goshs is Missing Write Protection for Parametric Data Valuesgoshs · goshs · CWE-1314 | Yüksek7,7 | — | %0,4 | 10 Nis 2026 |
26İzleyin | CVE-2026-42091İstismar yok | goshs has Cross-Origin Arbitrary File Write via Missing CSRF on PUT and Wildcard CORSgoshs · goshs · CWE-352 | Orta6,5 | — | %0,2 | 4 May 2026 |
24İzleyin | CVE-2026-40883İstismar yok | goshs: CSRF in state-changing GET routes enables authenticated file deletion and directory creationgoshs · goshs · CWE-352 | Orta6,1 | — | %0,2 | 21 Nis 2026 |
- CVE-2026-3547139İzleyin
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in goshs
KritikCVSS 9,8İstismar yokEPSS %1goshs · goshs6 Nis 2026
- CVE-2026-3539239İzleyin
goshs has an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in goshs PUT Upload
KritikCVSS 9,8İstismar yokEPSS %1goshs · goshs6 Nis 2026
- CVE-2026-3539339İzleyin
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in goshs POST multipart upload
KritikCVSS 9,8İstismar yokEPSS %1goshs · goshs6 Nis 2026
- CVE-2026-4088439İzleyin
goshs: Empty-username SFTP password authentication bypass in goshs
KritikCVSS 9,8İstismar yokEPSS %1goshs · goshs21 Nis 2026
- CVE-2026-4018937İzleyin
goshs has a file-based ACL authorization bypass in goshs state-changing routes
KritikCVSS 9,3İstismar yokEPSS %1goshs · goshs10 Nis 2026
- CVE-2026-4090336İzleyin
Goshs - ArtiPACKED Vulnerability – GitHub Actions Credential Persistence
KritikCVSS 9,1İstismar yokEPSS %0goshs · goshs21 Nis 2026
- CVE-2026-4087634İzleyin
SFTP root escape via prefix-based path validation in goshs
YüksekCVSS 8,7İstismar yokEPSS %1goshs · goshs21 Nis 2026
- CVE-2026-3458132İzleyin
goshs has Auth Bypass via Share Token
YüksekCVSS 8,1İstismar yokEPSS %0goshs · goshs2 Nis 2026
- CVE-2026-4088530İzleyin
goshs: Public collaborator feed leaks .goshs ACL credentials and enables unauthorized access
YüksekCVSS 7,7İstismar yokEPSS %0goshs · goshs21 Nis 2026
- CVE-2026-4018830İzleyin
goshs is Missing Write Protection for Parametric Data Values
YüksekCVSS 7,7İstismar yokEPSS %0goshs · goshs10 Nis 2026
- CVE-2026-4209126İzleyin
goshs has Cross-Origin Arbitrary File Write via Missing CSRF on PUT and Wildcard CORS
OrtaCVSS 6,5İstismar yokEPSS %0goshs · goshs4 May 2026
- CVE-2026-4088324İzleyin
goshs: CSRF in state-changing GET routes enables authenticated file deletion and directory creation
OrtaCVSS 6,1İstismar yokEPSS %0goshs · goshs21 Nis 2026