Miembros de
Boletines de Vulnerabilidades |
CVE-2026-40903 |
|
| Software afectado | GITHUB |
| goshs is a SimpleHTTPServer written in Go. Prior to 2.0.0-beta.6, goshs has an ArtiPACKED vulnerability. ArtiPACKED can lead to leakage of the GITHUB_TOKEN through workflow artifacts, even though the token is not present in the repository source code. This vulnerability is fixed in 2.0.0-beta.6. | |
Link: |
|
| https://nvd.nist.gov/vuln/detail/CVE-2026-40903 | |
