<?xml version="1.0" encoding="UTF-8"?><rss xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:atom="http://www.w3.org/2005/Atom" version="2.0"><channel><title><![CDATA[🚨 CVE-2026-35392: goshs &amp;lt; 2.0.0-beta.3 has a CRITICAL path traversal flaw (CVSS 9.8).]]></title><description><![CDATA[<p><img src="https://board.circlewithadot.net/assets/plugins/nodebb-plugin-emoji/emoji/android/1f6a8.png?v=28325c671da" class="not-responsive emoji emoji-android emoji--rotating_light" style="height:23px;width:auto;vertical-align:middle" title="🚨" alt="🚨" /> CVE-2026-35392: goshs &lt; 2.0.0-beta.3 has a CRITICAL path traversal flaw (CVSS 9.8). Remote attackers can write files anywhere on the server. Upgrade to 2.0.0-beta.3+ ASAP! <a href="https://radar.offseq.com/threat/cve-2026-35392-cwe-22-improper-limitation-of-a-pat-4b67dff2" rel="nofollow noopener"><span>https://</span><span>radar.offseq.com/threat/cve-20</span><span>26-35392-cwe-22-improper-limitation-of-a-pat-4b67dff2</span></a> <a href="https://infosec.exchange/tags/OffSeq" rel="tag">#<span>OffSeq</span></a> <a href="https://infosec.exchange/tags/Infosec" rel="tag">#<span>Infosec</span></a> <a href="https://infosec.exchange/tags/GoLang" rel="tag">#<span>GoLang</span></a> <a href="https://infosec.exchange/tags/Vulnerability" rel="tag">#<span>Vulnerability</span></a></p>

<div class="row mt-3"><div class="col-12 mt-3"><img class="img-thumbnail" src="https://media.infosec.exchange/infosec.exchange/media_attachments/files/116/361/188/362/939/561/original/b6b6d53987741ded.png" alt="Link Preview Image" /></div></div>]]></description><link>https://board.circlewithadot.net/topic/f2bd148a-3a50-4aab-ac34-626feed42481/cve-2026-35392-goshs-lt-2.0.0-beta.3-has-a-critical-path-traversal-flaw-cvss-9.8-.</link><generator>RSS for Node</generator><lastBuildDate>Thu, 09 Apr 2026 10:56:17 GMT</lastBuildDate><atom:link href="https://board.circlewithadot.net/topic/f2bd148a-3a50-4aab-ac34-626feed42481.rss" rel="self" type="application/rss+xml"/><pubDate>Tue, 07 Apr 2026 03:00:28 GMT</pubDate><ttl>60</ttl></channel></rss>