CVE-2026-38600

Name of the Vulnerable Software and Affected Versions codeskyblue gohttpserver versions prior to 1.3.1

Description A Zip Slip issue exists in the '/upload' endpoint. This allows an attacker to write arbitrary files anywhere on the server by uploading a specially crafted Zip archive. Zip Slip is a directory traversal vulnerability that occurs when an application extracts files from an archive without properly validating the destination path.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.