A vulnerability categorized as problematic has been discovered in patrickhener goshs up to 2.0.1. This issue affects some unknown processing of the file httpserver/updown.go. The manipulation results in cross-site request forgery.

This vulnerability was named CVE-2026-42091. The attack may be performed from remote. There is no available exploit.

It is advisable to upgrade the affected component.