Skip to content
Threat Feed

Product

Goshs/V2 <= 2.0.6

1 brief RSS
high advisory

goshs SSH Tunnel Vulnerable to MITM via Insecure Host Key Handling

The goshs application disables SSH host key verification when using the --tunnel flag, making it vulnerable to man-in-the-middle attacks that expose plaintext HTTP traffic.

goshs/v2 <= 2.0.6 mitm ssh insecure-configuration
2r 6t