/

CVE-2026-38600

Severity:

CRITICAL RISK

(9.8)

CVE-2026-38600

Received

Vulnerability type

Category:

CWE:

CWE-22

Impact:

Severity:

CRITICAL RISK

(9.8)

CVSS version:

3.1

Catch this CVE while code is being written

Detect vulnerable code directly in pull requests, so CVEs are fixed before merge.

Sources

SourceLink
github.comgithub.com/Den-Sec/security-research/blob/master/advisories/gohttpserver/VDR-001-zipslip.md
github.comgithub.com/codeskyblue/gohttpserver
github.comgithub.com/codeskyblue/gohttpserver/issues/232
security.snyk.iosecurity.snyk.io/research/zip-slip-vulnerability
Find out what's already
exploitable in your codebase.