CSRF in Patrickhener Goshs

CVE-2026-40883

goshs is a SimpleHTTPServer written in Go. From 2.0.0-beta.4 to 2.0.0-beta.5, goshs contains a cross-site request forgery issue in its state-changing HTTP GET routes. An external attacker can cause an already authenticated browser to trigg…

Vulnerability class: CSRF (Cross-Site Request Forgery)

EPSS: 0.000 (7.2th percentile) — read the EPSS interpretation.