GHSA lookup
GHSA-RHF7-WVW3-VJVM
Pruva has a verified reproduction for GHSA-RHF7-WVW3-VJVM: goshs: PUT upload accepts cross-origin requests without CSRF token. The canonical evidence record is REPRO-2026-00158.
REPRO
REPRO-2026-00158
Package
github.com/patrickhener/goshs · go
Severity
MEDIUM
Status
published