A vulnerability marked as critical has been reported in patrickhener goshs up to 2.0.0-beta.2. Affected is an unknown function of the file httpserver/updown.go. Performing a manipulation results in path traversal.
This vulnerability is known as CVE-2026-35392. Remote exploitation of the attack is possible. No exploit is available.
It is suggested to upgrade the affected component.