Go github.com/patrickhener/goshs/v2

Name: Go github.com/patrickhener/goshs/v2
Brand: Go

productUS

pkg:golang/github.com/patrickhener/goshs/v2

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

public exploit

EPSS ≥ 10%

unpatched

critical

by severity

0critical3high0medium0low

updated 2026-10-29

vulnerabilities (10)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2026-40884US	—OT elevated	0.48% (41st)	—	2.0.0	2026-04-21	< 2.0.0
CVE-2026-66064US	—OT elevated	0.45% (39th)	—	2.1.5-0.20260727065949-f3ef599e4091	2026-07-28	< 2.1.5-0.20260727065949-f3ef599e4091
CVE-2026-40876US	high8.8	0.44% (38th)	—	2.0.0	2026-04-21	< 2.0.0
CVE-2026-62325US	—OT elevated	0.43% (37th)	—	2.1.4	2026-07-28	2.1.3 → 2.1.4
CVE-2026-64863US	—	0.42% (36th)	—	2.1.4	2026-07-28	< 2.1.4
CVE-2026-54719US	—OT elevated	0.35% (29th)	—	2.1.1	2026-07-28	< 2.1.1
CVE-2026-66063US	—	0.34% (28th)	—	2.1.5-0.20260727065949-f3ef599e4091	2026-07-28	< 2.1.5-0.20260727065949-f3ef599e4091
CVE-2026-40885US	high8.8	0.31% (24th)	—	2.0.0-beta.6	2026-04-21	2.0.0-beta.4 → 2.0.0-beta.6
CVE-2026-42091US	—	0.17% (6th)	—	2.0.2	2026-05-04	< 2.0.2
CVE-2026-40883US	high8.1	0.14% (4th)	—	2.0.0-beta.6	2026-04-21	2.0.0-beta.4 → 2.0.0-beta.6

The flaw types (CWEs) most of these CVEs share.

CWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')3 CVEs
CWE-306Missing Authentication for Critical Function2 CVEs
CWE-352Cross-Site Request Forgery (CSRF)2 CVEs
CWE-863Incorrect Authorization2 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor1 CVEs
CWE-284Improper Access Control1 CVEs
CWE-41Improper Resolution of Path Equivalence1 CVEs
CWE-862Missing Authorization1 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.