UNKNOWN NVD
CVE-2026-38600
A Zip Slip vulnerability in the /upload endpoint of codeskyblue gohttpserver through v1.3.0 allows attackers to write arbitrary files via uploading a crafted Zi
A Zip Slip vulnerability in the /upload endpoint of codeskyblue gohttpserver through v1.3.0 allows attackers to write arbitrary files via uploading a crafted Zip archive.
References
- https://github.com/Den-Sec/security-research/blob/master/advisories/gohttpserver/VDR-001-z
- https://github.com/codeskyblue/gohttpserver
- https://github.com/codeskyblue/gohttpserver/issues/232
- https://security.snyk.io/research/zip-slip-vulnerability
This unknown severity vulnerability was published on 2026-11-03 via NVD.
vulnfeed aggregates 18261 vulnerabilities from NVD, CISA KEV,
Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.