Go goshs.de/goshs/v2

Name: Go goshs.de/goshs/v2
Brand: Go

productUS

pkg:golang/goshs.de/goshs/v2

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

public exploit

EPSS ≥ 10%

unpatched

critical

by severity

0critical0high0medium0low

updated 2026-10-28

vulnerabilities (8)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2026-66064US	—OT elevated	0.45% (39th)	—	2.1.5-0.20260727065949-f3ef599e4091	2026-07-28	< 2.1.5-0.20260727065949-f3ef599e4091
CVE-2026-62325US	—OT elevated	0.43% (37th)	—	2.1.4	2026-07-28	2.1.3 → 2.1.4
CVE-2026-64863US	—	0.42% (36th)	—	2.1.4	2026-07-28	< 2.1.4
CVE-2026-50138US	—	0.38% (32nd)	—	2.1.0	2026-08-18	< 2.1.0
CVE-2026-54719US	—OT elevated	0.35% (29th)	—	2.1.1	2026-07-28	< 2.1.1
CVE-2026-66063US	—	0.34% (28th)	—	2.1.5-0.20260727065949-f3ef599e4091	2026-07-28	< 2.1.5-0.20260727065949-f3ef599e4091
CVE-2026-50139US	—	0.26% (17th)	—	2.1.0	2026-08-18	< 2.1.0
CVE-2026-42091US	—	0.17% (6th)	—	2.0.2	2026-05-04	< 2.0.2

The flaw types (CWEs) most of these CVEs share.

CWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')2 CVEs
CWE-284Improper Access Control2 CVEs
CWE-863Incorrect Authorization2 CVEs
CWE-306Missing Authentication for Critical Function1 CVEs
CWE-352Cross-Site Request Forgery (CSRF)1 CVEs
CWE-362Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')1 CVEs
CWE-41Improper Resolution of Path Equivalence1 CVEs
CWE-862Missing Authorization1 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.