gohttpserver Zip Slip Arbitrary File Write Vulnerability

A Zip Slip vulnerability has been found in gohttpserver, affecting versions through v1.3.0.

The flaw exists in the /upload endpoint and allows attackers to write arbitrary files by uploading a crafted Zip archive.

• Affected product: codeskyblue gohttpserver through v1.3.0
• Attack vector: crafted Zip archive via /upload
• Impact: arbitrary file write