Unrated severityNVD Advisory· Published Nov 3, 2026

CVE-2026-38600

Description

A Zip Slip vulnerability in the /upload endpoint of codeskyblue gohttpserver through v1.3.0 allows attackers to write arbitrary files via uploading a crafted Zip archive.

Affected products

Codeskyblue/gohttpserverllm-fuzzy
Range: <=1.3.0

Patches

Vulnerability mechanics

References

github.com/Den-Sec/security-research/blob/master/advisories/gohttpserver/VDR-001-zipslip.mdnvd
github.com/codeskyblue/gohttpserver/issues/232nvd
security.snyk.io/research/zip-slip-vulnerabilitynvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000