| Package | Affected versions | Patched versions |
|---|---|---|
| goshs | = 2.0.0< 2.0.0 | 2.0.0 |
goshs is a SimpleHTTPServer written in Go. Prior to 2.0.0-beta.6, goshs has an ArtiPACKED vulnerability. ArtiPACKED can lead to leakage of the GITHUB_TOKEN through workflow artifacts, even though the token is not present in the repository source code. This vulnerability is fixed in 2.0.0-beta.6.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free