CVE-2026-35393 | patrickhener goshs up to 2.0.0-beta.2 Multipart Upload path traversal (GHSA-jg56-wf8x-qrv5)

A vulnerability described as critical has been identified in patrickhener goshs up to 2.0.0-beta.2. Affected by this vulnerability is an unknown functionality of the component Multipart Upload Handler. Executing a manipulation can lead to path traversal.

This vulnerability is handled as CVE-2026-35393. The attack can be executed remotely. There is not any exploit available.

Upgrading the affected component is recommended.