| id: GO-2026-5469 | |
| modules: | |
| - module: github.com/patrickhener/goshs | |
| versions: | |
| - introduced: 1.1.0 | |
| vulnerable_at: 1.1.4 | |
| summary: goshs has Auth Bypass via Share Token in github.com/patrickhener/goshs | |
| cves: | |
| - CVE-2026-34581 | |
| ghsas: | |
| - GHSA-jgfx-74g2-9r6g | |
| references: | |
| - advisory: https://github.com/patrickhener/goshs/security/advisories/GHSA-jgfx-74g2-9r6g | |
| - advisory: https://nvd.nist.gov/vuln/detail/CVE-2026-34581 | |
| - fix: https://github.com/patrickhener/goshs/commit/6fb224ed15c2ccc0c61a5ebe22f2401eb06e9216 | |
| - web: https://github.com/patrickhener/goshs/releases/tag/v2.0.0-beta.2 | |
| source: | |
| id: GHSA-jgfx-74g2-9r6g | |
| created: 2026-06-25T15:46:18.582723645-04:00 | |
| review_status: UNREVIEWED |