Go to main page
Versions in this module
go1
May 7, 2026
Apr 7, 2026 GO-2026-4978 +2 more
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Mar 6, 2026 GO-2026-4871 +3 more
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Feb 10, 2026 GO-2026-4871 +3 more
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Feb 4, 2026 GO-2026-4871 +3 more
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Jan 15, 2026 GO-2026-4871 +3 more
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Dec 16, 2025 GO-2026-4871 +3 more
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
May 7, 2026
Apr 7, 2026 GO-2026-4978 +2 more
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Mar 6, 2026 GO-2026-4871 +3 more
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Feb 4, 2026 GO-2026-4871 +3 more
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Jan 15, 2026 GO-2026-4871 +3 more
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Dec 2, 2025 GO-2026-4338 +5 more
GO-2026-4338: Unexpected code execution when invoking toolchain in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Nov 5, 2025 GO-2026-4338 +5 more
GO-2026-4338: Unexpected code execution when invoking toolchain in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Oct 13, 2025 GO-2026-4338 +5 more
GO-2026-4338: Unexpected code execution when invoking toolchain in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Oct 7, 2025 GO-2026-4338 +5 more
GO-2026-4338: Unexpected code execution when invoking toolchain in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Sep 3, 2025 GO-2026-4338 +5 more
GO-2026-4338: Unexpected code execution when invoking toolchain in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Aug 12, 2025 GO-2026-4338 +5 more
GO-2026-4338: Unexpected code execution when invoking toolchain in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Aug 6, 2025 GO-2026-4871 +3 more
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Jul 8, 2025 GO-2026-4871 +3 more
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Jun 11, 2025 GO-2026-4871 +3 more
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Feb 4, 2026 GO-2026-4871 +3 more
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Jan 15, 2026 GO-2026-4871 +3 more
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Dec 2, 2025 GO-2026-4339 +4 more
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Nov 5, 2025 GO-2026-4339 +4 more
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Oct 13, 2025 GO-2026-4339 +4 more
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Oct 7, 2025 GO-2026-4339 +4 more
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Sep 3, 2025 GO-2026-4339 +4 more
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Aug 6, 2025 GO-2026-4339 +4 more
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Jul 8, 2025 GO-2026-4339 +4 more
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Jun 5, 2025 GO-2025-3828 +5 more
GO-2025-3828: Unexpected command execution in untrusted VCS repositories in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
May 6, 2025 GO-2025-3828 +5 more
GO-2025-3828: Unexpected command execution in untrusted VCS repositories in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Apr 1, 2025 GO-2025-3828 +5 more
GO-2025-3828: Unexpected command execution in untrusted VCS repositories in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Mar 4, 2025 GO-2025-3828 +5 more
GO-2025-3828: Unexpected command execution in untrusted VCS repositories in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Feb 11, 2025 GO-2025-3828 +5 more
GO-2025-3828: Unexpected command execution in untrusted VCS repositories in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Feb 5, 2025 GO-2025-3828 +5 more
GO-2025-3828: Unexpected command execution in untrusted VCS repositories in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Jan 16, 2025 GO-2025-3428 +6 more
GO-2025-3428: Arbitrary code execution during build on darwin in cmd/go
GO-2025-3828: Unexpected command execution in untrusted VCS repositories in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Dec 13, 2024 GO-2025-3383 +6 more
GO-2025-3383: GOAUTH credential leak in cmd/go
GO-2025-3828: Unexpected command execution in untrusted VCS repositories in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Aug 6, 2025 GO-2026-4339 +4 more
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Jul 8, 2025 GO-2026-4339 +4 more
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Jun 5, 2025 GO-2025-3828 +5 more
GO-2025-3828: Unexpected command execution in untrusted VCS repositories in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
May 6, 2025 GO-2025-3828 +5 more
GO-2025-3828: Unexpected command execution in untrusted VCS repositories in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Apr 1, 2025 GO-2025-3828 +5 more
GO-2025-3828: Unexpected command execution in untrusted VCS repositories in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Mar 4, 2025 GO-2025-3828 +5 more
GO-2025-3828: Unexpected command execution in untrusted VCS repositories in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Feb 4, 2025 GO-2025-3828 +5 more
GO-2025-3828: Unexpected command execution in untrusted VCS repositories in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Jan 16, 2025 GO-2025-3828 +5 more
GO-2025-3828: Unexpected command execution in untrusted VCS repositories in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Dec 3, 2024 GO-2025-3828 +5 more
GO-2025-3828: Unexpected command execution in untrusted VCS repositories in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Nov 6, 2024 GO-2025-3828 +5 more
GO-2025-3828: Unexpected command execution in untrusted VCS repositories in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Oct 1, 2024 GO-2025-3828 +5 more
GO-2025-3828: Unexpected command execution in untrusted VCS repositories in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Sep 5, 2024 GO-2025-3828 +5 more
GO-2025-3828: Unexpected command execution in untrusted VCS repositories in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Aug 13, 2024 GO-2025-3828 +5 more
GO-2025-3828: Unexpected command execution in untrusted VCS repositories in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Jul 16, 2024 GO-2025-3828 +5 more
GO-2025-3828: Unexpected command execution in untrusted VCS repositories in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Jun 21, 2024 GO-2025-3828 +5 more
GO-2025-3828: Unexpected command execution in untrusted VCS repositories in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Feb 4, 2025 GO-2025-3828 +5 more
GO-2025-3828: Unexpected command execution in untrusted VCS repositories in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Jan 16, 2025 GO-2025-3828 +5 more
GO-2025-3828: Unexpected command execution in untrusted VCS repositories in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Dec 3, 2024 GO-2025-3828 +5 more
GO-2025-3828: Unexpected command execution in untrusted VCS repositories in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Nov 6, 2024 GO-2025-3828 +5 more
GO-2025-3828: Unexpected command execution in untrusted VCS repositories in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Oct 1, 2024 GO-2025-3828 +5 more
GO-2025-3828: Unexpected command execution in untrusted VCS repositories in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Sep 5, 2024 GO-2025-3828 +5 more
GO-2025-3828: Unexpected command execution in untrusted VCS repositories in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Aug 6, 2024 GO-2025-3828 +5 more
GO-2025-3828: Unexpected command execution in untrusted VCS repositories in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Jul 2, 2024 GO-2025-3828 +5 more
GO-2025-3828: Unexpected command execution in untrusted VCS repositories in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Jun 4, 2024 GO-2025-3828 +5 more
GO-2025-3828: Unexpected command execution in untrusted VCS repositories in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
May 7, 2024 GO-2025-3828 +5 more
GO-2025-3828: Unexpected command execution in untrusted VCS repositories in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Apr 3, 2024 GO-2024-2825 +6 more
GO-2024-2825: Arbitrary code execution during build on Darwin in cmd/go
GO-2025-3828: Unexpected command execution in untrusted VCS repositories in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Mar 5, 2024 GO-2024-2825 +6 more
GO-2024-2825: Arbitrary code execution during build on Darwin in cmd/go
GO-2025-3828: Unexpected command execution in untrusted VCS repositories in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Feb 6, 2024 GO-2024-2825 +6 more
GO-2024-2825: Arbitrary code execution during build on Darwin in cmd/go
GO-2025-3828: Unexpected command execution in untrusted VCS repositories in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Jan 24, 2024 GO-2024-2825 +6 more
GO-2024-2825: Arbitrary code execution during build on Darwin in cmd/go
GO-2025-3828: Unexpected command execution in untrusted VCS repositories in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Dec 19, 2023 GO-2024-2825 +6 more
GO-2024-2825: Arbitrary code execution during build on Darwin in cmd/go
GO-2025-3828: Unexpected command execution in untrusted VCS repositories in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Aug 6, 2024 GO-2025-3828 +5 more
GO-2025-3828: Unexpected command execution in untrusted VCS repositories in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Jul 2, 2024 GO-2025-3828 +5 more
GO-2025-3828: Unexpected command execution in untrusted VCS repositories in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Jun 4, 2024 GO-2025-3828 +5 more
GO-2025-3828: Unexpected command execution in untrusted VCS repositories in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
May 7, 2024 GO-2025-3828 +5 more
GO-2025-3828: Unexpected command execution in untrusted VCS repositories in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Apr 3, 2024 GO-2024-2825 +6 more
GO-2024-2825: Arbitrary code execution during build on Darwin in cmd/go
GO-2025-3828: Unexpected command execution in untrusted VCS repositories in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Mar 5, 2024 GO-2024-2825 +6 more
GO-2024-2825: Arbitrary code execution during build on Darwin in cmd/go
GO-2025-3828: Unexpected command execution in untrusted VCS repositories in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Feb 6, 2024 GO-2024-2825 +6 more
GO-2024-2825: Arbitrary code execution during build on Darwin in cmd/go
GO-2025-3828: Unexpected command execution in untrusted VCS repositories in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Jan 9, 2024 GO-2024-2825 +6 more
GO-2024-2825: Arbitrary code execution during build on Darwin in cmd/go
GO-2025-3828: Unexpected command execution in untrusted VCS repositories in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Dec 5, 2023 GO-2024-2825 +6 more
GO-2024-2825: Arbitrary code execution during build on Darwin in cmd/go
GO-2025-3828: Unexpected command execution in untrusted VCS repositories in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Nov 7, 2023 GO-2023-2383 +7 more
GO-2023-2383: Command 'go get' may unexpectedly fallback to insecure git in cmd/go
GO-2024-2825: Arbitrary code execution during build on Darwin in cmd/go
GO-2025-3828: Unexpected command execution in untrusted VCS repositories in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Oct 10, 2023 GO-2023-2383 +7 more
GO-2023-2383: Command 'go get' may unexpectedly fallback to insecure git in cmd/go
GO-2024-2825: Arbitrary code execution during build on Darwin in cmd/go
GO-2025-3828: Unexpected command execution in untrusted VCS repositories in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Oct 5, 2023 GO-2023-2383 +7 more
GO-2023-2383: Command 'go get' may unexpectedly fallback to insecure git in cmd/go
GO-2024-2825: Arbitrary code execution during build on Darwin in cmd/go
GO-2025-3828: Unexpected command execution in untrusted VCS repositories in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Sep 6, 2023 GO-2023-2095 +8 more
GO-2023-2095: Arbitrary code execution during build via line directives in cmd/go
GO-2023-2383: Command 'go get' may unexpectedly fallback to insecure git in cmd/go
GO-2024-2825: Arbitrary code execution during build on Darwin in cmd/go
GO-2025-3828: Unexpected command execution in untrusted VCS repositories in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Aug 8, 2023 GO-2023-2042 +9 more
GO-2023-2042: Arbitrary code execution via go.mod toolchain directive in cmd/go
GO-2023-2095: Arbitrary code execution during build via line directives in cmd/go
GO-2023-2383: Command 'go get' may unexpectedly fallback to insecure git in cmd/go
GO-2024-2825: Arbitrary code execution during build on Darwin in cmd/go
GO-2025-3828: Unexpected command execution in untrusted VCS repositories in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Aug 2, 2023 GO-2023-2042 +9 more
GO-2023-2042: Arbitrary code execution via go.mod toolchain directive in cmd/go
GO-2023-2095: Arbitrary code execution during build via line directives in cmd/go
GO-2023-2383: Command 'go get' may unexpectedly fallback to insecure git in cmd/go
GO-2024-2825: Arbitrary code execution during build on Darwin in cmd/go
GO-2025-3828: Unexpected command execution in untrusted VCS repositories in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Jul 14, 2023 GO-2023-2042 +9 more
GO-2023-2042: Arbitrary code execution via go.mod toolchain directive in cmd/go
GO-2023-2095: Arbitrary code execution during build via line directives in cmd/go
GO-2023-2383: Command 'go get' may unexpectedly fallback to insecure git in cmd/go
GO-2024-2825: Arbitrary code execution during build on Darwin in cmd/go
GO-2025-3828: Unexpected command execution in untrusted VCS repositories in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Jun 21, 2023 GO-2023-2042 +9 more
GO-2023-2042: Arbitrary code execution via go.mod toolchain directive in cmd/go
GO-2023-2095: Arbitrary code execution during build via line directives in cmd/go
GO-2023-2383: Command 'go get' may unexpectedly fallback to insecure git in cmd/go
GO-2024-2825: Arbitrary code execution during build on Darwin in cmd/go
GO-2025-3828: Unexpected command execution in untrusted VCS repositories in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Jun 16, 2023 GO-2023-2042 +9 more
GO-2023-2042: Arbitrary code execution via go.mod toolchain directive in cmd/go
GO-2023-2095: Arbitrary code execution during build via line directives in cmd/go
GO-2023-2383: Command 'go get' may unexpectedly fallback to insecure git in cmd/go
GO-2024-2825: Arbitrary code execution during build on Darwin in cmd/go
GO-2025-3828: Unexpected command execution in untrusted VCS repositories in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Feb 6, 2024 GO-2024-2825 +7 more
GO-2024-2825: Arbitrary code execution during build on Darwin in cmd/go
GO-2024-2962: Output of "go env" does not sanitize values in cmd/go
GO-2025-3828: Unexpected command execution in untrusted VCS repositories in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Jan 9, 2024 GO-2024-2825 +7 more
GO-2024-2825: Arbitrary code execution during build on Darwin in cmd/go
GO-2024-2962: Output of "go env" does not sanitize values in cmd/go
GO-2025-3828: Unexpected command execution in untrusted VCS repositories in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Dec 5, 2023 GO-2024-2825 +7 more
GO-2024-2825: Arbitrary code execution during build on Darwin in cmd/go
GO-2024-2962: Output of "go env" does not sanitize values in cmd/go
GO-2025-3828: Unexpected command execution in untrusted VCS repositories in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Nov 7, 2023 GO-2023-2383 +8 more
GO-2023-2383: Command 'go get' may unexpectedly fallback to insecure git in cmd/go
GO-2024-2825: Arbitrary code execution during build on Darwin in cmd/go
GO-2024-2962: Output of "go env" does not sanitize values in cmd/go
GO-2025-3828: Unexpected command execution in untrusted VCS repositories in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Oct 10, 2023 GO-2023-2383 +8 more
GO-2023-2383: Command 'go get' may unexpectedly fallback to insecure git in cmd/go
GO-2024-2825: Arbitrary code execution during build on Darwin in cmd/go
GO-2024-2962: Output of "go env" does not sanitize values in cmd/go
GO-2025-3828: Unexpected command execution in untrusted VCS repositories in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Oct 5, 2023 GO-2023-2383 +8 more
GO-2023-2383: Command 'go get' may unexpectedly fallback to insecure git in cmd/go
GO-2024-2825: Arbitrary code execution during build on Darwin in cmd/go
GO-2024-2962: Output of "go env" does not sanitize values in cmd/go
GO-2025-3828: Unexpected command execution in untrusted VCS repositories in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Sep 6, 2023 GO-2023-2095 +9 more
GO-2023-2095: Arbitrary code execution during build via line directives in cmd/go
GO-2023-2383: Command 'go get' may unexpectedly fallback to insecure git in cmd/go
GO-2024-2825: Arbitrary code execution during build on Darwin in cmd/go
GO-2024-2962: Output of "go env" does not sanitize values in cmd/go
GO-2025-3828: Unexpected command execution in untrusted VCS repositories in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Aug 1, 2023 GO-2023-2095 +9 more
GO-2023-2095: Arbitrary code execution during build via line directives in cmd/go
GO-2023-2383: Command 'go get' may unexpectedly fallback to insecure git in cmd/go
GO-2024-2825: Arbitrary code execution during build on Darwin in cmd/go
GO-2024-2962: Output of "go env" does not sanitize values in cmd/go
GO-2025-3828: Unexpected command execution in untrusted VCS repositories in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Jul 11, 2023 GO-2023-2095 +9 more
GO-2023-2095: Arbitrary code execution during build via line directives in cmd/go
GO-2023-2383: Command 'go get' may unexpectedly fallback to insecure git in cmd/go
GO-2024-2825: Arbitrary code execution during build on Darwin in cmd/go
GO-2024-2962: Output of "go env" does not sanitize values in cmd/go
GO-2025-3828: Unexpected command execution in untrusted VCS repositories in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Jun 6, 2023 GO-2023-2095 +9 more
GO-2023-2095: Arbitrary code execution during build via line directives in cmd/go
GO-2023-2383: Command 'go get' may unexpectedly fallback to insecure git in cmd/go
GO-2024-2825: Arbitrary code execution during build on Darwin in cmd/go
GO-2024-2962: Output of "go env" does not sanitize values in cmd/go
GO-2025-3828: Unexpected command execution in untrusted VCS repositories in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
May 2, 2023 GO-2023-1839 +12 more
GO-2023-1839: Code injection via go command with cgo in cmd/go
GO-2023-1841: Improper handling of non-optional LDFLAGS in go command with cgo in cmd/go
GO-2023-1842: Improper sanitization of LDFLAGS with embedded spaces in go command with cgo in cmd/go
GO-2023-2095: Arbitrary code execution during build via line directives in cmd/go
GO-2023-2383: Command 'go get' may unexpectedly fallback to insecure git in cmd/go
GO-2024-2825: Arbitrary code execution during build on Darwin in cmd/go
GO-2024-2962: Output of "go env" does not sanitize values in cmd/go
GO-2025-3828: Unexpected command execution in untrusted VCS repositories in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Apr 4, 2023 GO-2023-1839 +12 more
GO-2023-1839: Code injection via go command with cgo in cmd/go
GO-2023-1841: Improper handling of non-optional LDFLAGS in go command with cgo in cmd/go
GO-2023-1842: Improper sanitization of LDFLAGS with embedded spaces in go command with cgo in cmd/go
GO-2023-2095: Arbitrary code execution during build via line directives in cmd/go
GO-2023-2383: Command 'go get' may unexpectedly fallback to insecure git in cmd/go
GO-2024-2825: Arbitrary code execution during build on Darwin in cmd/go
GO-2024-2962: Output of "go env" does not sanitize values in cmd/go
GO-2025-3828: Unexpected command execution in untrusted VCS repositories in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Mar 7, 2023 GO-2023-1839 +12 more
GO-2023-1839: Code injection via go command with cgo in cmd/go
GO-2023-1841: Improper handling of non-optional LDFLAGS in go command with cgo in cmd/go
GO-2023-1842: Improper sanitization of LDFLAGS with embedded spaces in go command with cgo in cmd/go
GO-2023-2095: Arbitrary code execution during build via line directives in cmd/go
GO-2023-2383: Command 'go get' may unexpectedly fallback to insecure git in cmd/go
GO-2024-2825: Arbitrary code execution during build on Darwin in cmd/go
GO-2024-2962: Output of "go env" does not sanitize values in cmd/go
GO-2025-3828: Unexpected command execution in untrusted VCS repositories in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Feb 14, 2023 GO-2023-1839 +12 more
GO-2023-1839: Code injection via go command with cgo in cmd/go
GO-2023-1841: Improper handling of non-optional LDFLAGS in go command with cgo in cmd/go
GO-2023-1842: Improper sanitization of LDFLAGS with embedded spaces in go command with cgo in cmd/go
GO-2023-2095: Arbitrary code execution during build via line directives in cmd/go
GO-2023-2383: Command 'go get' may unexpectedly fallback to insecure git in cmd/go
GO-2024-2825: Arbitrary code execution during build on Darwin in cmd/go
GO-2024-2962: Output of "go env" does not sanitize values in cmd/go
GO-2025-3828: Unexpected command execution in untrusted VCS repositories in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Feb 1, 2023 GO-2023-1839 +12 more
GO-2023-1839: Code injection via go command with cgo in cmd/go
GO-2023-1841: Improper handling of non-optional LDFLAGS in go command with cgo in cmd/go
GO-2023-1842: Improper sanitization of LDFLAGS with embedded spaces in go command with cgo in cmd/go
GO-2023-2095: Arbitrary code execution during build via line directives in cmd/go
GO-2023-2383: Command 'go get' may unexpectedly fallback to insecure git in cmd/go
GO-2024-2825: Arbitrary code execution during build on Darwin in cmd/go
GO-2024-2962: Output of "go env" does not sanitize values in cmd/go
GO-2025-3828: Unexpected command execution in untrusted VCS repositories in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Jan 12, 2023 GO-2023-1839 +12 more
GO-2023-1839: Code injection via go command with cgo in cmd/go
GO-2023-1841: Improper handling of non-optional LDFLAGS in go command with cgo in cmd/go
GO-2023-1842: Improper sanitization of LDFLAGS with embedded spaces in go command with cgo in cmd/go
GO-2023-2095: Arbitrary code execution during build via line directives in cmd/go
GO-2023-2383: Command 'go get' may unexpectedly fallback to insecure git in cmd/go
GO-2024-2825: Arbitrary code execution during build on Darwin in cmd/go
GO-2024-2962: Output of "go env" does not sanitize values in cmd/go
GO-2025-3828: Unexpected command execution in untrusted VCS repositories in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Jan 4, 2023 GO-2023-1839 +12 more
GO-2023-1839: Code injection via go command with cgo in cmd/go
GO-2023-1841: Improper handling of non-optional LDFLAGS in go command with cgo in cmd/go
GO-2023-1842: Improper sanitization of LDFLAGS with embedded spaces in go command with cgo in cmd/go
GO-2023-2095: Arbitrary code execution during build via line directives in cmd/go
GO-2023-2383: Command 'go get' may unexpectedly fallback to insecure git in cmd/go
GO-2024-2825: Arbitrary code execution during build on Darwin in cmd/go
GO-2024-2962: Output of "go env" does not sanitize values in cmd/go
GO-2025-3828: Unexpected command execution in untrusted VCS repositories in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Dec 7, 2022 GO-2023-1839 +12 more
GO-2023-1839: Code injection via go command with cgo in cmd/go
GO-2023-1841: Improper handling of non-optional LDFLAGS in go command with cgo in cmd/go
GO-2023-1842: Improper sanitization of LDFLAGS with embedded spaces in go command with cgo in cmd/go
GO-2023-2095: Arbitrary code execution during build via line directives in cmd/go
GO-2023-2383: Command 'go get' may unexpectedly fallback to insecure git in cmd/go
GO-2024-2825: Arbitrary code execution during build on Darwin in cmd/go
GO-2024-2962: Output of "go env" does not sanitize values in cmd/go
GO-2025-3828: Unexpected command execution in untrusted VCS repositories in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Sep 6, 2023 GO-2023-2095 +9 more
GO-2023-2095: Arbitrary code execution during build via line directives in cmd/go
GO-2023-2383: Command 'go get' may unexpectedly fallback to insecure git in cmd/go
GO-2024-2825: Arbitrary code execution during build on Darwin in cmd/go
GO-2024-2962: Output of "go env" does not sanitize values in cmd/go
GO-2025-3828: Unexpected command execution in untrusted VCS repositories in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Aug 1, 2023 GO-2023-2095 +9 more
GO-2023-2095: Arbitrary code execution during build via line directives in cmd/go
GO-2023-2383: Command 'go get' may unexpectedly fallback to insecure git in cmd/go
GO-2024-2825: Arbitrary code execution during build on Darwin in cmd/go
GO-2024-2962: Output of "go env" does not sanitize values in cmd/go
GO-2025-3828: Unexpected command execution in untrusted VCS repositories in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Jul 11, 2023 GO-2023-2095 +9 more
GO-2023-2095: Arbitrary code execution during build via line directives in cmd/go
GO-2023-2383: Command 'go get' may unexpectedly fallback to insecure git in cmd/go
GO-2024-2825: Arbitrary code execution during build on Darwin in cmd/go
GO-2024-2962: Output of "go env" does not sanitize values in cmd/go
GO-2025-3828: Unexpected command execution in untrusted VCS repositories in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Jun 6, 2023 GO-2023-2095 +9 more
GO-2023-2095: Arbitrary code execution during build via line directives in cmd/go
GO-2023-2383: Command 'go get' may unexpectedly fallback to insecure git in cmd/go
GO-2024-2825: Arbitrary code execution during build on Darwin in cmd/go
GO-2024-2962: Output of "go env" does not sanitize values in cmd/go
GO-2025-3828: Unexpected command execution in untrusted VCS repositories in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
May 2, 2023 GO-2023-1839 +12 more
GO-2023-1839: Code injection via go command with cgo in cmd/go
GO-2023-1841: Improper handling of non-optional LDFLAGS in go command with cgo in cmd/go
GO-2023-1842: Improper sanitization of LDFLAGS with embedded spaces in go command with cgo in cmd/go
GO-2023-2095: Arbitrary code execution during build via line directives in cmd/go
GO-2023-2383: Command 'go get' may unexpectedly fallback to insecure git in cmd/go
GO-2024-2825: Arbitrary code execution during build on Darwin in cmd/go
GO-2024-2962: Output of "go env" does not sanitize values in cmd/go
GO-2025-3828: Unexpected command execution in untrusted VCS repositories in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Apr 4, 2023 GO-2023-1839 +12 more
GO-2023-1839: Code injection via go command with cgo in cmd/go
GO-2023-1841: Improper handling of non-optional LDFLAGS in go command with cgo in cmd/go
GO-2023-1842: Improper sanitization of LDFLAGS with embedded spaces in go command with cgo in cmd/go
GO-2023-2095: Arbitrary code execution during build via line directives in cmd/go
GO-2023-2383: Command 'go get' may unexpectedly fallback to insecure git in cmd/go
GO-2024-2825: Arbitrary code execution during build on Darwin in cmd/go
GO-2024-2962: Output of "go env" does not sanitize values in cmd/go
GO-2025-3828: Unexpected command execution in untrusted VCS repositories in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Mar 7, 2023 GO-2023-1839 +12 more
GO-2023-1839: Code injection via go command with cgo in cmd/go
GO-2023-1841: Improper handling of non-optional LDFLAGS in go command with cgo in cmd/go
GO-2023-1842: Improper sanitization of LDFLAGS with embedded spaces in go command with cgo in cmd/go
GO-2023-2095: Arbitrary code execution during build via line directives in cmd/go
GO-2023-2383: Command 'go get' may unexpectedly fallback to insecure git in cmd/go
GO-2024-2825: Arbitrary code execution during build on Darwin in cmd/go
GO-2024-2962: Output of "go env" does not sanitize values in cmd/go
GO-2025-3828: Unexpected command execution in untrusted VCS repositories in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Feb 14, 2023 GO-2023-1839 +12 more
GO-2023-1839: Code injection via go command with cgo in cmd/go
GO-2023-1841: Improper handling of non-optional LDFLAGS in go command with cgo in cmd/go
GO-2023-1842: Improper sanitization of LDFLAGS with embedded spaces in go command with cgo in cmd/go
GO-2023-2095: Arbitrary code execution during build via line directives in cmd/go
GO-2023-2383: Command 'go get' may unexpectedly fallback to insecure git in cmd/go
GO-2024-2825: Arbitrary code execution during build on Darwin in cmd/go
GO-2024-2962: Output of "go env" does not sanitize values in cmd/go
GO-2025-3828: Unexpected command execution in untrusted VCS repositories in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Jan 10, 2023 GO-2023-1839 +12 more
GO-2023-1839: Code injection via go command with cgo in cmd/go
GO-2023-1841: Improper handling of non-optional LDFLAGS in go command with cgo in cmd/go
GO-2023-1842: Improper sanitization of LDFLAGS with embedded spaces in go command with cgo in cmd/go
GO-2023-2095: Arbitrary code execution during build via line directives in cmd/go
GO-2023-2383: Command 'go get' may unexpectedly fallback to insecure git in cmd/go
GO-2024-2825: Arbitrary code execution during build on Darwin in cmd/go
GO-2024-2962: Output of "go env" does not sanitize values in cmd/go
GO-2025-3828: Unexpected command execution in untrusted VCS repositories in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Dec 6, 2022 GO-2023-1839 +12 more
GO-2023-1839: Code injection via go command with cgo in cmd/go
GO-2023-1841: Improper handling of non-optional LDFLAGS in go command with cgo in cmd/go
GO-2023-1842: Improper sanitization of LDFLAGS with embedded spaces in go command with cgo in cmd/go
GO-2023-2095: Arbitrary code execution during build via line directives in cmd/go
GO-2023-2383: Command 'go get' may unexpectedly fallback to insecure git in cmd/go
GO-2024-2825: Arbitrary code execution during build on Darwin in cmd/go
GO-2024-2962: Output of "go env" does not sanitize values in cmd/go
GO-2025-3828: Unexpected command execution in untrusted VCS repositories in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Nov 1, 2022 GO-2023-1839 +12 more
GO-2023-1839: Code injection via go command with cgo in cmd/go
GO-2023-1841: Improper handling of non-optional LDFLAGS in go command with cgo in cmd/go
GO-2023-1842: Improper sanitization of LDFLAGS with embedded spaces in go command with cgo in cmd/go
GO-2023-2095: Arbitrary code execution during build via line directives in cmd/go
GO-2023-2383: Command 'go get' may unexpectedly fallback to insecure git in cmd/go
GO-2024-2825: Arbitrary code execution during build on Darwin in cmd/go
GO-2024-2962: Output of "go env" does not sanitize values in cmd/go
GO-2025-3828: Unexpected command execution in untrusted VCS repositories in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Oct 4, 2022 GO-2023-1839 +12 more
GO-2023-1839: Code injection via go command with cgo in cmd/go
GO-2023-1841: Improper handling of non-optional LDFLAGS in go command with cgo in cmd/go
GO-2023-1842: Improper sanitization of LDFLAGS with embedded spaces in go command with cgo in cmd/go
GO-2023-2095: Arbitrary code execution during build via line directives in cmd/go
GO-2023-2383: Command 'go get' may unexpectedly fallback to insecure git in cmd/go
GO-2024-2825: Arbitrary code execution during build on Darwin in cmd/go
GO-2024-2962: Output of "go env" does not sanitize values in cmd/go
GO-2025-3828: Unexpected command execution in untrusted VCS repositories in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Sep 6, 2022 GO-2023-1839 +12 more
GO-2023-1839: Code injection via go command with cgo in cmd/go
GO-2023-1841: Improper handling of non-optional LDFLAGS in go command with cgo in cmd/go
GO-2023-1842: Improper sanitization of LDFLAGS with embedded spaces in go command with cgo in cmd/go
GO-2023-2095: Arbitrary code execution during build via line directives in cmd/go
GO-2023-2383: Command 'go get' may unexpectedly fallback to insecure git in cmd/go
GO-2024-2825: Arbitrary code execution during build on Darwin in cmd/go
GO-2024-2962: Output of "go env" does not sanitize values in cmd/go
GO-2025-3828: Unexpected command execution in untrusted VCS repositories in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Aug 2, 2022 GO-2023-1839 +12 more
GO-2023-1839: Code injection via go command with cgo in cmd/go
GO-2023-1841: Improper handling of non-optional LDFLAGS in go command with cgo in cmd/go
GO-2023-1842: Improper sanitization of LDFLAGS with embedded spaces in go command with cgo in cmd/go
GO-2023-2095: Arbitrary code execution during build via line directives in cmd/go
GO-2023-2383: Command 'go get' may unexpectedly fallback to insecure git in cmd/go
GO-2024-2825: Arbitrary code execution during build on Darwin in cmd/go
GO-2024-2962: Output of "go env" does not sanitize values in cmd/go
GO-2025-3828: Unexpected command execution in untrusted VCS repositories in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Jul 12, 2022 GO-2023-1839 +12 more
GO-2023-1839: Code injection via go command with cgo in cmd/go
GO-2023-1841: Improper handling of non-optional LDFLAGS in go command with cgo in cmd/go
GO-2023-1842: Improper sanitization of LDFLAGS with embedded spaces in go command with cgo in cmd/go
GO-2023-2095: Arbitrary code execution during build via line directives in cmd/go
GO-2023-2383: Command 'go get' may unexpectedly fallback to insecure git in cmd/go
GO-2024-2825: Arbitrary code execution during build on Darwin in cmd/go
GO-2024-2962: Output of "go env" does not sanitize values in cmd/go
GO-2025-3828: Unexpected command execution in untrusted VCS repositories in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Jul 6, 2022 GO-2023-1839 +12 more
GO-2023-1839: Code injection via go command with cgo in cmd/go
GO-2023-1841: Improper handling of non-optional LDFLAGS in go command with cgo in cmd/go
GO-2023-1842: Improper sanitization of LDFLAGS with embedded spaces in go command with cgo in cmd/go
GO-2023-2095: Arbitrary code execution during build via line directives in cmd/go
GO-2023-2383: Command 'go get' may unexpectedly fallback to insecure git in cmd/go
GO-2024-2825: Arbitrary code execution during build on Darwin in cmd/go
GO-2024-2962: Output of "go env" does not sanitize values in cmd/go
GO-2025-3828: Unexpected command execution in untrusted VCS repositories in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Jun 9, 2022 GO-2023-1839 +12 more
GO-2023-1839: Code injection via go command with cgo in cmd/go
GO-2023-1841: Improper handling of non-optional LDFLAGS in go command with cgo in cmd/go
GO-2023-1842: Improper sanitization of LDFLAGS with embedded spaces in go command with cgo in cmd/go
GO-2023-2095: Arbitrary code execution during build via line directives in cmd/go
GO-2023-2383: Command 'go get' may unexpectedly fallback to insecure git in cmd/go
GO-2024-2825: Arbitrary code execution during build on Darwin in cmd/go
GO-2024-2962: Output of "go env" does not sanitize values in cmd/go
GO-2025-3828: Unexpected command execution in untrusted VCS repositories in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Jan 10, 2023 GO-2023-1839 +12 more
GO-2023-1839: Code injection via go command with cgo in cmd/go
GO-2023-1841: Improper handling of non-optional LDFLAGS in go command with cgo in cmd/go
GO-2023-1842: Improper sanitization of LDFLAGS with embedded spaces in go command with cgo in cmd/go
GO-2023-2095: Arbitrary code execution during build via line directives in cmd/go
GO-2023-2383: Command 'go get' may unexpectedly fallback to insecure git in cmd/go
GO-2024-2825: Arbitrary code execution during build on Darwin in cmd/go
GO-2024-2962: Output of "go env" does not sanitize values in cmd/go
GO-2025-3828: Unexpected command execution in untrusted VCS repositories in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Dec 6, 2022 GO-2023-1839 +12 more
GO-2023-1839: Code injection via go command with cgo in cmd/go
GO-2023-1841: Improper handling of non-optional LDFLAGS in go command with cgo in cmd/go
GO-2023-1842: Improper sanitization of LDFLAGS with embedded spaces in go command with cgo in cmd/go
GO-2023-2095: Arbitrary code execution during build via line directives in cmd/go
GO-2023-2383: Command 'go get' may unexpectedly fallback to insecure git in cmd/go
GO-2024-2825: Arbitrary code execution during build on Darwin in cmd/go
GO-2024-2962: Output of "go env" does not sanitize values in cmd/go
GO-2025-3828: Unexpected command execution in untrusted VCS repositories in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Nov 1, 2022 GO-2023-1839 +12 more
GO-2023-1839: Code injection via go command with cgo in cmd/go
GO-2023-1841: Improper handling of non-optional LDFLAGS in go command with cgo in cmd/go
GO-2023-1842: Improper sanitization of LDFLAGS with embedded spaces in go command with cgo in cmd/go
GO-2023-2095: Arbitrary code execution during build via line directives in cmd/go
GO-2023-2383: Command 'go get' may unexpectedly fallback to insecure git in cmd/go
GO-2024-2825: Arbitrary code execution during build on Darwin in cmd/go
GO-2024-2962: Output of "go env" does not sanitize values in cmd/go
GO-2025-3828: Unexpected command execution in untrusted VCS repositories in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Oct 4, 2022 GO-2023-1839 +12 more
GO-2023-1839: Code injection via go command with cgo in cmd/go
GO-2023-1841: Improper handling of non-optional LDFLAGS in go command with cgo in cmd/go
GO-2023-1842: Improper sanitization of LDFLAGS with embedded spaces in go command with cgo in cmd/go
GO-2023-2095: Arbitrary code execution during build via line directives in cmd/go
GO-2023-2383: Command 'go get' may unexpectedly fallback to insecure git in cmd/go
GO-2024-2825: Arbitrary code execution during build on Darwin in cmd/go
GO-2024-2962: Output of "go env" does not sanitize values in cmd/go
GO-2025-3828: Unexpected command execution in untrusted VCS repositories in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Sep 6, 2022 GO-2023-1839 +12 more
GO-2023-1839: Code injection via go command with cgo in cmd/go
GO-2023-1841: Improper handling of non-optional LDFLAGS in go command with cgo in cmd/go
GO-2023-1842: Improper sanitization of LDFLAGS with embedded spaces in go command with cgo in cmd/go
GO-2023-2095: Arbitrary code execution during build via line directives in cmd/go
GO-2023-2383: Command 'go get' may unexpectedly fallback to insecure git in cmd/go
GO-2024-2825: Arbitrary code execution during build on Darwin in cmd/go
GO-2024-2962: Output of "go env" does not sanitize values in cmd/go
GO-2025-3828: Unexpected command execution in untrusted VCS repositories in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Aug 1, 2022 GO-2023-1839 +12 more
GO-2023-1839: Code injection via go command with cgo in cmd/go
GO-2023-1841: Improper handling of non-optional LDFLAGS in go command with cgo in cmd/go
GO-2023-1842: Improper sanitization of LDFLAGS with embedded spaces in go command with cgo in cmd/go
GO-2023-2095: Arbitrary code execution during build via line directives in cmd/go
GO-2023-2383: Command 'go get' may unexpectedly fallback to insecure git in cmd/go
GO-2024-2825: Arbitrary code execution during build on Darwin in cmd/go
GO-2024-2962: Output of "go env" does not sanitize values in cmd/go
GO-2025-3828: Unexpected command execution in untrusted VCS repositories in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Jul 12, 2022 GO-2023-1839 +12 more
GO-2023-1839: Code injection via go command with cgo in cmd/go
GO-2023-1841: Improper handling of non-optional LDFLAGS in go command with cgo in cmd/go
GO-2023-1842: Improper sanitization of LDFLAGS with embedded spaces in go command with cgo in cmd/go
GO-2023-2095: Arbitrary code execution during build via line directives in cmd/go
GO-2023-2383: Command 'go get' may unexpectedly fallback to insecure git in cmd/go
GO-2024-2825: Arbitrary code execution during build on Darwin in cmd/go
GO-2024-2962: Output of "go env" does not sanitize values in cmd/go
GO-2025-3828: Unexpected command execution in untrusted VCS repositories in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Jun 1, 2022 GO-2023-1839 +12 more
GO-2023-1839: Code injection via go command with cgo in cmd/go
GO-2023-1841: Improper handling of non-optional LDFLAGS in go command with cgo in cmd/go
GO-2023-1842: Improper sanitization of LDFLAGS with embedded spaces in go command with cgo in cmd/go
GO-2023-2095: Arbitrary code execution during build via line directives in cmd/go
GO-2023-2383: Command 'go get' may unexpectedly fallback to insecure git in cmd/go
GO-2024-2825: Arbitrary code execution during build on Darwin in cmd/go
GO-2024-2962: Output of "go env" does not sanitize values in cmd/go
GO-2025-3828: Unexpected command execution in untrusted VCS repositories in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
May 10, 2022 GO-2023-1839 +12 more
GO-2023-1839: Code injection via go command with cgo in cmd/go
GO-2023-1841: Improper handling of non-optional LDFLAGS in go command with cgo in cmd/go
GO-2023-1842: Improper sanitization of LDFLAGS with embedded spaces in go command with cgo in cmd/go
GO-2023-2095: Arbitrary code execution during build via line directives in cmd/go
GO-2023-2383: Command 'go get' may unexpectedly fallback to insecure git in cmd/go
GO-2024-2825: Arbitrary code execution during build on Darwin in cmd/go
GO-2024-2962: Output of "go env" does not sanitize values in cmd/go
GO-2025-3828: Unexpected command execution in untrusted VCS repositories in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Apr 12, 2022 GO-2023-1839 +12 more
GO-2023-1839: Code injection via go command with cgo in cmd/go
GO-2023-1841: Improper handling of non-optional LDFLAGS in go command with cgo in cmd/go
GO-2023-1842: Improper sanitization of LDFLAGS with embedded spaces in go command with cgo in cmd/go
GO-2023-2095: Arbitrary code execution during build via line directives in cmd/go
GO-2023-2383: Command 'go get' may unexpectedly fallback to insecure git in cmd/go
GO-2024-2825: Arbitrary code execution during build on Darwin in cmd/go
GO-2024-2962: Output of "go env" does not sanitize values in cmd/go
GO-2025-3828: Unexpected command execution in untrusted VCS repositories in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Mar 15, 2022 GO-2023-1839 +12 more
GO-2023-1839: Code injection via go command with cgo in cmd/go
GO-2023-1841: Improper handling of non-optional LDFLAGS in go command with cgo in cmd/go
GO-2023-1842: Improper sanitization of LDFLAGS with embedded spaces in go command with cgo in cmd/go
GO-2023-2095: Arbitrary code execution during build via line directives in cmd/go
GO-2023-2383: Command 'go get' may unexpectedly fallback to insecure git in cmd/go
GO-2024-2825: Arbitrary code execution during build on Darwin in cmd/go
GO-2024-2962: Output of "go env" does not sanitize values in cmd/go
GO-2025-3828: Unexpected command execution in untrusted VCS repositories in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Feb 16, 2022 GO-2023-1839 +12 more
GO-2023-1839: Code injection via go command with cgo in cmd/go
GO-2023-1841: Improper handling of non-optional LDFLAGS in go command with cgo in cmd/go
GO-2023-1842: Improper sanitization of LDFLAGS with embedded spaces in go command with cgo in cmd/go
GO-2023-2095: Arbitrary code execution during build via line directives in cmd/go
GO-2023-2383: Command 'go get' may unexpectedly fallback to insecure git in cmd/go
GO-2024-2825: Arbitrary code execution during build on Darwin in cmd/go
GO-2024-2962: Output of "go env" does not sanitize values in cmd/go
GO-2025-3828: Unexpected command execution in untrusted VCS repositories in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Jan 31, 2022 GO-2023-1839 +12 more
GO-2023-1839: Code injection via go command with cgo in cmd/go
GO-2023-1841: Improper handling of non-optional LDFLAGS in go command with cgo in cmd/go
GO-2023-1842: Improper sanitization of LDFLAGS with embedded spaces in go command with cgo in cmd/go
GO-2023-2095: Arbitrary code execution during build via line directives in cmd/go
GO-2023-2383: Command 'go get' may unexpectedly fallback to insecure git in cmd/go
GO-2024-2825: Arbitrary code execution during build on Darwin in cmd/go
GO-2024-2962: Output of "go env" does not sanitize values in cmd/go
GO-2025-3828: Unexpected command execution in untrusted VCS repositories in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Dec 14, 2021 GO-2023-1839 +12 more
GO-2023-1839: Code injection via go command with cgo in cmd/go
GO-2023-1841: Improper handling of non-optional LDFLAGS in go command with cgo in cmd/go
GO-2023-1842: Improper sanitization of LDFLAGS with embedded spaces in go command with cgo in cmd/go
GO-2023-2095: Arbitrary code execution during build via line directives in cmd/go
GO-2023-2383: Command 'go get' may unexpectedly fallback to insecure git in cmd/go
GO-2024-2825: Arbitrary code execution during build on Darwin in cmd/go
GO-2024-2962: Output of "go env" does not sanitize values in cmd/go
GO-2025-3828: Unexpected command execution in untrusted VCS repositories in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Aug 1, 2022 GO-2023-1839 +12 more
GO-2023-1839: Code injection via go command with cgo in cmd/go
GO-2023-1841: Improper handling of non-optional LDFLAGS in go command with cgo in cmd/go
GO-2023-1842: Improper sanitization of LDFLAGS with embedded spaces in go command with cgo in cmd/go
GO-2023-2095: Arbitrary code execution during build via line directives in cmd/go
GO-2023-2383: Command 'go get' may unexpectedly fallback to insecure git in cmd/go
GO-2024-2825: Arbitrary code execution during build on Darwin in cmd/go
GO-2024-2962: Output of "go env" does not sanitize values in cmd/go
GO-2025-3828: Unexpected command execution in untrusted VCS repositories in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Jul 12, 2022 GO-2023-1839 +12 more
GO-2023-1839: Code injection via go command with cgo in cmd/go
GO-2023-1841: Improper handling of non-optional LDFLAGS in go command with cgo in cmd/go
GO-2023-1842: Improper sanitization of LDFLAGS with embedded spaces in go command with cgo in cmd/go
GO-2023-2095: Arbitrary code execution during build via line directives in cmd/go
GO-2023-2383: Command 'go get' may unexpectedly fallback to insecure git in cmd/go
GO-2024-2825: Arbitrary code execution during build on Darwin in cmd/go
GO-2024-2962: Output of "go env" does not sanitize values in cmd/go
GO-2025-3828: Unexpected command execution in untrusted VCS repositories in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Jun 1, 2022 GO-2023-1839 +12 more
GO-2023-1839: Code injection via go command with cgo in cmd/go
GO-2023-1841: Improper handling of non-optional LDFLAGS in go command with cgo in cmd/go
GO-2023-1842: Improper sanitization of LDFLAGS with embedded spaces in go command with cgo in cmd/go
GO-2023-2095: Arbitrary code execution during build via line directives in cmd/go
GO-2023-2383: Command 'go get' may unexpectedly fallback to insecure git in cmd/go
GO-2024-2825: Arbitrary code execution during build on Darwin in cmd/go
GO-2024-2962: Output of "go env" does not sanitize values in cmd/go
GO-2025-3828: Unexpected command execution in untrusted VCS repositories in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
May 10, 2022 GO-2023-1839 +12 more
GO-2023-1839: Code injection via go command with cgo in cmd/go
GO-2023-1841: Improper handling of non-optional LDFLAGS in go command with cgo in cmd/go
GO-2023-1842: Improper sanitization of LDFLAGS with embedded spaces in go command with cgo in cmd/go
GO-2023-2095: Arbitrary code execution during build via line directives in cmd/go
GO-2023-2383: Command 'go get' may unexpectedly fallback to insecure git in cmd/go
GO-2024-2825: Arbitrary code execution during build on Darwin in cmd/go
GO-2024-2962: Output of "go env" does not sanitize values in cmd/go
GO-2025-3828: Unexpected command execution in untrusted VCS repositories in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Apr 12, 2022 GO-2023-1839 +12 more
GO-2023-1839: Code injection via go command with cgo in cmd/go
GO-2023-1841: Improper handling of non-optional LDFLAGS in go command with cgo in cmd/go
GO-2023-1842: Improper sanitization of LDFLAGS with embedded spaces in go command with cgo in cmd/go
GO-2023-2095: Arbitrary code execution during build via line directives in cmd/go
GO-2023-2383: Command 'go get' may unexpectedly fallback to insecure git in cmd/go
GO-2024-2825: Arbitrary code execution during build on Darwin in cmd/go
GO-2024-2962: Output of "go env" does not sanitize values in cmd/go
GO-2025-3828: Unexpected command execution in untrusted VCS repositories in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Mar 3, 2022 GO-2023-1839 +12 more
GO-2023-1839: Code injection via go command with cgo in cmd/go
GO-2023-1841: Improper handling of non-optional LDFLAGS in go command with cgo in cmd/go
GO-2023-1842: Improper sanitization of LDFLAGS with embedded spaces in go command with cgo in cmd/go
GO-2023-2095: Arbitrary code execution during build via line directives in cmd/go
GO-2023-2383: Command 'go get' may unexpectedly fallback to insecure git in cmd/go
GO-2024-2825: Arbitrary code execution during build on Darwin in cmd/go
GO-2024-2962: Output of "go env" does not sanitize values in cmd/go
GO-2025-3828: Unexpected command execution in untrusted VCS repositories in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Feb 9, 2022 GO-2023-1839 +12 more
GO-2023-1839: Code injection via go command with cgo in cmd/go
GO-2023-1841: Improper handling of non-optional LDFLAGS in go command with cgo in cmd/go
GO-2023-1842: Improper sanitization of LDFLAGS with embedded spaces in go command with cgo in cmd/go
GO-2023-2095: Arbitrary code execution during build via line directives in cmd/go
GO-2023-2383: Command 'go get' may unexpectedly fallback to insecure git in cmd/go
GO-2024-2825: Arbitrary code execution during build on Darwin in cmd/go
GO-2024-2962: Output of "go env" does not sanitize values in cmd/go
GO-2025-3828: Unexpected command execution in untrusted VCS repositories in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Jan 6, 2022 GO-2023-1839 +12 more
GO-2023-1839: Code injection via go command with cgo in cmd/go
GO-2023-1841: Improper handling of non-optional LDFLAGS in go command with cgo in cmd/go
GO-2023-1842: Improper sanitization of LDFLAGS with embedded spaces in go command with cgo in cmd/go
GO-2023-2095: Arbitrary code execution during build via line directives in cmd/go
GO-2023-2383: Command 'go get' may unexpectedly fallback to insecure git in cmd/go
GO-2024-2825: Arbitrary code execution during build on Darwin in cmd/go
GO-2024-2962: Output of "go env" does not sanitize values in cmd/go
GO-2025-3828: Unexpected command execution in untrusted VCS repositories in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Dec 9, 2021 GO-2023-1839 +12 more
GO-2023-1839: Code injection via go command with cgo in cmd/go
GO-2023-1841: Improper handling of non-optional LDFLAGS in go command with cgo in cmd/go
GO-2023-1842: Improper sanitization of LDFLAGS with embedded spaces in go command with cgo in cmd/go
GO-2023-2095: Arbitrary code execution during build via line directives in cmd/go
GO-2023-2383: Command 'go get' may unexpectedly fallback to insecure git in cmd/go
GO-2024-2825: Arbitrary code execution during build on Darwin in cmd/go
GO-2024-2962: Output of "go env" does not sanitize values in cmd/go
GO-2025-3828: Unexpected command execution in untrusted VCS repositories in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Dec 2, 2021 GO-2023-1839 +12 more
GO-2023-1839: Code injection via go command with cgo in cmd/go
GO-2023-1841: Improper handling of non-optional LDFLAGS in go command with cgo in cmd/go
GO-2023-1842: Improper sanitization of LDFLAGS with embedded spaces in go command with cgo in cmd/go
GO-2023-2095: Arbitrary code execution during build via line directives in cmd/go
GO-2023-2383: Command 'go get' may unexpectedly fallback to insecure git in cmd/go
GO-2024-2825: Arbitrary code execution during build on Darwin in cmd/go
GO-2024-2962: Output of "go env" does not sanitize values in cmd/go
GO-2025-3828: Unexpected command execution in untrusted VCS repositories in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Nov 4, 2021 GO-2023-1839 +12 more
GO-2023-1839: Code injection via go command with cgo in cmd/go
GO-2023-1841: Improper handling of non-optional LDFLAGS in go command with cgo in cmd/go
GO-2023-1842: Improper sanitization of LDFLAGS with embedded spaces in go command with cgo in cmd/go
GO-2023-2095: Arbitrary code execution during build via line directives in cmd/go
GO-2023-2383: Command 'go get' may unexpectedly fallback to insecure git in cmd/go
GO-2024-2825: Arbitrary code execution during build on Darwin in cmd/go
GO-2024-2962: Output of "go env" does not sanitize values in cmd/go
GO-2025-3828: Unexpected command execution in untrusted VCS repositories in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Oct 7, 2021 GO-2023-1839 +12 more
GO-2023-1839: Code injection via go command with cgo in cmd/go
GO-2023-1841: Improper handling of non-optional LDFLAGS in go command with cgo in cmd/go
GO-2023-1842: Improper sanitization of LDFLAGS with embedded spaces in go command with cgo in cmd/go
GO-2023-2095: Arbitrary code execution during build via line directives in cmd/go
GO-2023-2383: Command 'go get' may unexpectedly fallback to insecure git in cmd/go
GO-2024-2825: Arbitrary code execution during build on Darwin in cmd/go
GO-2024-2962: Output of "go env" does not sanitize values in cmd/go
GO-2025-3828: Unexpected command execution in untrusted VCS repositories in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Sep 9, 2021 GO-2023-1839 +12 more
GO-2023-1839: Code injection via go command with cgo in cmd/go
GO-2023-1841: Improper handling of non-optional LDFLAGS in go command with cgo in cmd/go
GO-2023-1842: Improper sanitization of LDFLAGS with embedded spaces in go command with cgo in cmd/go
GO-2023-2095: Arbitrary code execution during build via line directives in cmd/go
GO-2023-2383: Command 'go get' may unexpectedly fallback to insecure git in cmd/go
GO-2024-2825: Arbitrary code execution during build on Darwin in cmd/go
GO-2024-2962: Output of "go env" does not sanitize values in cmd/go
GO-2025-3828: Unexpected command execution in untrusted VCS repositories in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Aug 16, 2021 GO-2023-1839 +12 more
GO-2023-1839: Code injection via go command with cgo in cmd/go
GO-2023-1841: Improper handling of non-optional LDFLAGS in go command with cgo in cmd/go
GO-2023-1842: Improper sanitization of LDFLAGS with embedded spaces in go command with cgo in cmd/go
GO-2023-2095: Arbitrary code execution during build via line directives in cmd/go
GO-2023-2383: Command 'go get' may unexpectedly fallback to insecure git in cmd/go
GO-2024-2825: Arbitrary code execution during build on Darwin in cmd/go
GO-2024-2962: Output of "go env" does not sanitize values in cmd/go
GO-2025-3828: Unexpected command execution in untrusted VCS repositories in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Aug 2, 2021 GO-2023-1839 +12 more
GO-2023-1839: Code injection via go command with cgo in cmd/go
GO-2023-1841: Improper handling of non-optional LDFLAGS in go command with cgo in cmd/go
GO-2023-1842: Improper sanitization of LDFLAGS with embedded spaces in go command with cgo in cmd/go
GO-2023-2095: Arbitrary code execution during build via line directives in cmd/go
GO-2023-2383: Command 'go get' may unexpectedly fallback to insecure git in cmd/go
GO-2024-2825: Arbitrary code execution during build on Darwin in cmd/go
GO-2024-2962: Output of "go env" does not sanitize values in cmd/go
GO-2025-3828: Unexpected command execution in untrusted VCS repositories in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Jul 13, 2021 GO-2023-1839 +12 more
GO-2023-1839: Code injection via go command with cgo in cmd/go
GO-2023-1841: Improper handling of non-optional LDFLAGS in go command with cgo in cmd/go
GO-2023-1842: Improper sanitization of LDFLAGS with embedded spaces in go command with cgo in cmd/go
GO-2023-2095: Arbitrary code execution during build via line directives in cmd/go
GO-2023-2383: Command 'go get' may unexpectedly fallback to insecure git in cmd/go
GO-2024-2825: Arbitrary code execution during build on Darwin in cmd/go
GO-2024-2962: Output of "go env" does not sanitize values in cmd/go
GO-2025-3828: Unexpected command execution in untrusted VCS repositories in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Jun 10, 2021 GO-2023-1839 +12 more
GO-2023-1839: Code injection via go command with cgo in cmd/go
GO-2023-1841: Improper handling of non-optional LDFLAGS in go command with cgo in cmd/go
GO-2023-1842: Improper sanitization of LDFLAGS with embedded spaces in go command with cgo in cmd/go
GO-2023-2095: Arbitrary code execution during build via line directives in cmd/go
GO-2023-2383: Command 'go get' may unexpectedly fallback to insecure git in cmd/go
GO-2024-2825: Arbitrary code execution during build on Darwin in cmd/go
GO-2024-2962: Output of "go env" does not sanitize values in cmd/go
GO-2025-3828: Unexpected command execution in untrusted VCS repositories in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Mar 3, 2022 GO-2023-1839 +12 more
GO-2023-1839: Code injection via go command with cgo in cmd/go
GO-2023-1841: Improper handling of non-optional LDFLAGS in go command with cgo in cmd/go
GO-2023-1842: Improper sanitization of LDFLAGS with embedded spaces in go command with cgo in cmd/go
GO-2023-2095: Arbitrary code execution during build via line directives in cmd/go
GO-2023-2383: Command 'go get' may unexpectedly fallback to insecure git in cmd/go
GO-2024-2825: Arbitrary code execution during build on Darwin in cmd/go
GO-2024-2962: Output of "go env" does not sanitize values in cmd/go
GO-2025-3828: Unexpected command execution in untrusted VCS repositories in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Feb 9, 2022 GO-2023-1839 +12 more
GO-2023-1839: Code injection via go command with cgo in cmd/go
GO-2023-1841: Improper handling of non-optional LDFLAGS in go command with cgo in cmd/go
GO-2023-1842: Improper sanitization of LDFLAGS with embedded spaces in go command with cgo in cmd/go
GO-2023-2095: Arbitrary code execution during build via line directives in cmd/go
GO-2023-2383: Command 'go get' may unexpectedly fallback to insecure git in cmd/go
GO-2024-2825: Arbitrary code execution during build on Darwin in cmd/go
GO-2024-2962: Output of "go env" does not sanitize values in cmd/go
GO-2025-3828: Unexpected command execution in untrusted VCS repositories in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Jan 6, 2022 GO-2023-1839 +12 more
GO-2023-1839: Code injection via go command with cgo in cmd/go
GO-2023-1841: Improper handling of non-optional LDFLAGS in go command with cgo in cmd/go
GO-2023-1842: Improper sanitization of LDFLAGS with embedded spaces in go command with cgo in cmd/go
GO-2023-2095: Arbitrary code execution during build via line directives in cmd/go
GO-2023-2383: Command 'go get' may unexpectedly fallback to insecure git in cmd/go
GO-2024-2825: Arbitrary code execution during build on Darwin in cmd/go
GO-2024-2962: Output of "go env" does not sanitize values in cmd/go
GO-2025-3828: Unexpected command execution in untrusted VCS repositories in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Dec 9, 2021 GO-2023-1839 +12 more
GO-2023-1839: Code injection via go command with cgo in cmd/go
GO-2023-1841: Improper handling of non-optional LDFLAGS in go command with cgo in cmd/go
GO-2023-1842: Improper sanitization of LDFLAGS with embedded spaces in go command with cgo in cmd/go
GO-2023-2095: Arbitrary code execution during build via line directives in cmd/go
GO-2023-2383: Command 'go get' may unexpectedly fallback to insecure git in cmd/go
GO-2024-2825: Arbitrary code execution during build on Darwin in cmd/go
GO-2024-2962: Output of "go env" does not sanitize values in cmd/go
GO-2025-3828: Unexpected command execution in untrusted VCS repositories in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Dec 2, 2021 GO-2023-1839 +12 more
GO-2023-1839: Code injection via go command with cgo in cmd/go
GO-2023-1841: Improper handling of non-optional LDFLAGS in go command with cgo in cmd/go
GO-2023-1842: Improper sanitization of LDFLAGS with embedded spaces in go command with cgo in cmd/go
GO-2023-2095: Arbitrary code execution during build via line directives in cmd/go
GO-2023-2383: Command 'go get' may unexpectedly fallback to insecure git in cmd/go
GO-2024-2825: Arbitrary code execution during build on Darwin in cmd/go
GO-2024-2962: Output of "go env" does not sanitize values in cmd/go
GO-2025-3828: Unexpected command execution in untrusted VCS repositories in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Nov 4, 2021 GO-2023-1839 +12 more
GO-2023-1839: Code injection via go command with cgo in cmd/go
GO-2023-1841: Improper handling of non-optional LDFLAGS in go command with cgo in cmd/go
GO-2023-1842: Improper sanitization of LDFLAGS with embedded spaces in go command with cgo in cmd/go
GO-2023-2095: Arbitrary code execution during build via line directives in cmd/go
GO-2023-2383: Command 'go get' may unexpectedly fallback to insecure git in cmd/go
GO-2024-2825: Arbitrary code execution during build on Darwin in cmd/go
GO-2024-2962: Output of "go env" does not sanitize values in cmd/go
GO-2025-3828: Unexpected command execution in untrusted VCS repositories in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Oct 7, 2021 GO-2023-1839 +12 more
GO-2023-1839: Code injection via go command with cgo in cmd/go
GO-2023-1841: Improper handling of non-optional LDFLAGS in go command with cgo in cmd/go
GO-2023-1842: Improper sanitization of LDFLAGS with embedded spaces in go command with cgo in cmd/go
GO-2023-2095: Arbitrary code execution during build via line directives in cmd/go
GO-2023-2383: Command 'go get' may unexpectedly fallback to insecure git in cmd/go
GO-2024-2825: Arbitrary code execution during build on Darwin in cmd/go
GO-2024-2962: Output of "go env" does not sanitize values in cmd/go
GO-2025-3828: Unexpected command execution in untrusted VCS repositories in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Sep 9, 2021 GO-2023-1839 +12 more
GO-2023-1839: Code injection via go command with cgo in cmd/go
GO-2023-1841: Improper handling of non-optional LDFLAGS in go command with cgo in cmd/go
GO-2023-1842: Improper sanitization of LDFLAGS with embedded spaces in go command with cgo in cmd/go
GO-2023-2095: Arbitrary code execution during build via line directives in cmd/go
GO-2023-2383: Command 'go get' may unexpectedly fallback to insecure git in cmd/go
GO-2024-2825: Arbitrary code execution during build on Darwin in cmd/go
GO-2024-2962: Output of "go env" does not sanitize values in cmd/go
GO-2025-3828: Unexpected command execution in untrusted VCS repositories in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Aug 4, 2021 GO-2023-1839 +12 more
GO-2023-1839: Code injection via go command with cgo in cmd/go
GO-2023-1841: Improper handling of non-optional LDFLAGS in go command with cgo in cmd/go
GO-2023-1842: Improper sanitization of LDFLAGS with embedded spaces in go command with cgo in cmd/go
GO-2023-2095: Arbitrary code execution during build via line directives in cmd/go
GO-2023-2383: Command 'go get' may unexpectedly fallback to insecure git in cmd/go
GO-2024-2825: Arbitrary code execution during build on Darwin in cmd/go
GO-2024-2962: Output of "go env" does not sanitize values in cmd/go
GO-2025-3828: Unexpected command execution in untrusted VCS repositories in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Jul 12, 2021 GO-2023-1839 +12 more
GO-2023-1839: Code injection via go command with cgo in cmd/go
GO-2023-1841: Improper handling of non-optional LDFLAGS in go command with cgo in cmd/go
GO-2023-1842: Improper sanitization of LDFLAGS with embedded spaces in go command with cgo in cmd/go
GO-2023-2095: Arbitrary code execution during build via line directives in cmd/go
GO-2023-2383: Command 'go get' may unexpectedly fallback to insecure git in cmd/go
GO-2024-2825: Arbitrary code execution during build on Darwin in cmd/go
GO-2024-2962: Output of "go env" does not sanitize values in cmd/go
GO-2025-3828: Unexpected command execution in untrusted VCS repositories in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Jun 3, 2021 GO-2023-1839 +12 more
GO-2023-1839: Code injection via go command with cgo in cmd/go
GO-2023-1841: Improper handling of non-optional LDFLAGS in go command with cgo in cmd/go
GO-2023-1842: Improper sanitization of LDFLAGS with embedded spaces in go command with cgo in cmd/go
GO-2023-2095: Arbitrary code execution during build via line directives in cmd/go
GO-2023-2383: Command 'go get' may unexpectedly fallback to insecure git in cmd/go
GO-2024-2825: Arbitrary code execution during build on Darwin in cmd/go
GO-2024-2962: Output of "go env" does not sanitize values in cmd/go
GO-2025-3828: Unexpected command execution in untrusted VCS repositories in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
May 6, 2021 GO-2023-1839 +12 more
GO-2023-1839: Code injection via go command with cgo in cmd/go
GO-2023-1841: Improper handling of non-optional LDFLAGS in go command with cgo in cmd/go
GO-2023-1842: Improper sanitization of LDFLAGS with embedded spaces in go command with cgo in cmd/go
GO-2023-2095: Arbitrary code execution during build via line directives in cmd/go
GO-2023-2383: Command 'go get' may unexpectedly fallback to insecure git in cmd/go
GO-2024-2825: Arbitrary code execution during build on Darwin in cmd/go
GO-2024-2962: Output of "go env" does not sanitize values in cmd/go
GO-2025-3828: Unexpected command execution in untrusted VCS repositories in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Apr 1, 2021 GO-2023-1839 +12 more
GO-2023-1839: Code injection via go command with cgo in cmd/go
GO-2023-1841: Improper handling of non-optional LDFLAGS in go command with cgo in cmd/go
GO-2023-1842: Improper sanitization of LDFLAGS with embedded spaces in go command with cgo in cmd/go
GO-2023-2095: Arbitrary code execution during build via line directives in cmd/go
GO-2023-2383: Command 'go get' may unexpectedly fallback to insecure git in cmd/go
GO-2024-2825: Arbitrary code execution during build on Darwin in cmd/go
GO-2024-2962: Output of "go env" does not sanitize values in cmd/go
GO-2025-3828: Unexpected command execution in untrusted VCS repositories in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Mar 11, 2021 GO-2023-1839 +12 more
GO-2023-1839: Code injection via go command with cgo in cmd/go
GO-2023-1841: Improper handling of non-optional LDFLAGS in go command with cgo in cmd/go
GO-2023-1842: Improper sanitization of LDFLAGS with embedded spaces in go command with cgo in cmd/go
GO-2023-2095: Arbitrary code execution during build via line directives in cmd/go
GO-2023-2383: Command 'go get' may unexpectedly fallback to insecure git in cmd/go
GO-2024-2825: Arbitrary code execution during build on Darwin in cmd/go
GO-2024-2962: Output of "go env" does not sanitize values in cmd/go
GO-2025-3828: Unexpected command execution in untrusted VCS repositories in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Mar 10, 2021 GO-2023-1839 +12 more
GO-2023-1839: Code injection via go command with cgo in cmd/go
GO-2023-1841: Improper handling of non-optional LDFLAGS in go command with cgo in cmd/go
GO-2023-1842: Improper sanitization of LDFLAGS with embedded spaces in go command with cgo in cmd/go
GO-2023-2095: Arbitrary code execution during build via line directives in cmd/go
GO-2023-2383: Command 'go get' may unexpectedly fallback to insecure git in cmd/go
GO-2024-2825: Arbitrary code execution during build on Darwin in cmd/go
GO-2024-2962: Output of "go env" does not sanitize values in cmd/go
GO-2025-3828: Unexpected command execution in untrusted VCS repositories in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Feb 16, 2021 GO-2023-1839 +12 more
GO-2023-1839: Code injection via go command with cgo in cmd/go
GO-2023-1841: Improper handling of non-optional LDFLAGS in go command with cgo in cmd/go
GO-2023-1842: Improper sanitization of LDFLAGS with embedded spaces in go command with cgo in cmd/go
GO-2023-2095: Arbitrary code execution during build via line directives in cmd/go
GO-2023-2383: Command 'go get' may unexpectedly fallback to insecure git in cmd/go
GO-2024-2825: Arbitrary code execution during build on Darwin in cmd/go
GO-2024-2962: Output of "go env" does not sanitize values in cmd/go
GO-2025-3828: Unexpected command execution in untrusted VCS repositories in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Jan 27, 2021 GO-2023-1839 +12 more
GO-2023-1839: Code injection via go command with cgo in cmd/go
GO-2023-1841: Improper handling of non-optional LDFLAGS in go command with cgo in cmd/go
GO-2023-1842: Improper sanitization of LDFLAGS with embedded spaces in go command with cgo in cmd/go
GO-2023-2095: Arbitrary code execution during build via line directives in cmd/go
GO-2023-2383: Command 'go get' may unexpectedly fallback to insecure git in cmd/go
GO-2024-2825: Arbitrary code execution during build on Darwin in cmd/go
GO-2024-2962: Output of "go env" does not sanitize values in cmd/go
GO-2025-3828: Unexpected command execution in untrusted VCS repositories in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Dec 17, 2020 GO-2023-1839 +12 more
GO-2023-1839: Code injection via go command with cgo in cmd/go
GO-2023-1841: Improper handling of non-optional LDFLAGS in go command with cgo in cmd/go
GO-2023-1842: Improper sanitization of LDFLAGS with embedded spaces in go command with cgo in cmd/go
GO-2023-2095: Arbitrary code execution during build via line directives in cmd/go
GO-2023-2383: Command 'go get' may unexpectedly fallback to insecure git in cmd/go
GO-2024-2825: Arbitrary code execution during build on Darwin in cmd/go
GO-2024-2962: Output of "go env" does not sanitize values in cmd/go
GO-2025-3828: Unexpected command execution in untrusted VCS repositories in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Aug 4, 2021 GO-2023-1839 +12 more
GO-2023-1839: Code injection via go command with cgo in cmd/go
GO-2023-1841: Improper handling of non-optional LDFLAGS in go command with cgo in cmd/go
GO-2023-1842: Improper sanitization of LDFLAGS with embedded spaces in go command with cgo in cmd/go
GO-2023-2095: Arbitrary code execution during build via line directives in cmd/go
GO-2023-2383: Command 'go get' may unexpectedly fallback to insecure git in cmd/go
GO-2024-2825: Arbitrary code execution during build on Darwin in cmd/go
GO-2024-2962: Output of "go env" does not sanitize values in cmd/go
GO-2025-3828: Unexpected command execution in untrusted VCS repositories in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Jul 12, 2021 GO-2023-1839 +12 more
GO-2023-1839: Code injection via go command with cgo in cmd/go
GO-2023-1841: Improper handling of non-optional LDFLAGS in go command with cgo in cmd/go
GO-2023-1842: Improper sanitization of LDFLAGS with embedded spaces in go command with cgo in cmd/go
GO-2023-2095: Arbitrary code execution during build via line directives in cmd/go
GO-2023-2383: Command 'go get' may unexpectedly fallback to insecure git in cmd/go
GO-2024-2825: Arbitrary code execution during build on Darwin in cmd/go
GO-2024-2962: Output of "go env" does not sanitize values in cmd/go
GO-2025-3828: Unexpected command execution in untrusted VCS repositories in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Jun 3, 2021 GO-2023-1839 +12 more
GO-2023-1839: Code injection via go command with cgo in cmd/go
GO-2023-1841: Improper handling of non-optional LDFLAGS in go command with cgo in cmd/go
GO-2023-1842: Improper sanitization of LDFLAGS with embedded spaces in go command with cgo in cmd/go
GO-2023-2095: Arbitrary code execution during build via line directives in cmd/go
GO-2023-2383: Command 'go get' may unexpectedly fallback to insecure git in cmd/go
GO-2024-2825: Arbitrary code execution during build on Darwin in cmd/go
GO-2024-2962: Output of "go env" does not sanitize values in cmd/go
GO-2025-3828: Unexpected command execution in untrusted VCS repositories in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
May 6, 2021 GO-2023-1839 +12 more
GO-2023-1839: Code injection via go command with cgo in cmd/go
GO-2023-1841: Improper handling of non-optional LDFLAGS in go command with cgo in cmd/go
GO-2023-1842: Improper sanitization of LDFLAGS with embedded spaces in go command with cgo in cmd/go
GO-2023-2095: Arbitrary code execution during build via line directives in cmd/go
GO-2023-2383: Command 'go get' may unexpectedly fallback to insecure git in cmd/go
GO-2024-2825: Arbitrary code execution during build on Darwin in cmd/go
GO-2024-2962: Output of "go env" does not sanitize values in cmd/go
GO-2025-3828: Unexpected command execution in untrusted VCS repositories in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Apr 1, 2021 GO-2023-1839 +12 more
GO-2023-1839: Code injection via go command with cgo in cmd/go
GO-2023-1841: Improper handling of non-optional LDFLAGS in go command with cgo in cmd/go
GO-2023-1842: Improper sanitization of LDFLAGS with embedded spaces in go command with cgo in cmd/go
GO-2023-2095: Arbitrary code execution during build via line directives in cmd/go
GO-2023-2383: Command 'go get' may unexpectedly fallback to insecure git in cmd/go
GO-2024-2825: Arbitrary code execution during build on Darwin in cmd/go
GO-2024-2962: Output of "go env" does not sanitize values in cmd/go
GO-2025-3828: Unexpected command execution in untrusted VCS repositories in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Mar 11, 2021 GO-2023-1839 +12 more
GO-2023-1839: Code injection via go command with cgo in cmd/go
GO-2023-1841: Improper handling of non-optional LDFLAGS in go command with cgo in cmd/go
GO-2023-1842: Improper sanitization of LDFLAGS with embedded spaces in go command with cgo in cmd/go
GO-2023-2095: Arbitrary code execution during build via line directives in cmd/go
GO-2023-2383: Command 'go get' may unexpectedly fallback to insecure git in cmd/go
GO-2024-2825: Arbitrary code execution during build on Darwin in cmd/go
GO-2024-2962: Output of "go env" does not sanitize values in cmd/go
GO-2025-3828: Unexpected command execution in untrusted VCS repositories in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Mar 10, 2021 GO-2023-1839 +12 more
GO-2023-1839: Code injection via go command with cgo in cmd/go
GO-2023-1841: Improper handling of non-optional LDFLAGS in go command with cgo in cmd/go
GO-2023-1842: Improper sanitization of LDFLAGS with embedded spaces in go command with cgo in cmd/go
GO-2023-2095: Arbitrary code execution during build via line directives in cmd/go
GO-2023-2383: Command 'go get' may unexpectedly fallback to insecure git in cmd/go
GO-2024-2825: Arbitrary code execution during build on Darwin in cmd/go
GO-2024-2962: Output of "go env" does not sanitize values in cmd/go
GO-2025-3828: Unexpected command execution in untrusted VCS repositories in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Feb 4, 2021 GO-2023-1839 +12 more
GO-2023-1839: Code injection via go command with cgo in cmd/go
GO-2023-1841: Improper handling of non-optional LDFLAGS in go command with cgo in cmd/go
GO-2023-1842: Improper sanitization of LDFLAGS with embedded spaces in go command with cgo in cmd/go
GO-2023-2095: Arbitrary code execution during build via line directives in cmd/go
GO-2023-2383: Command 'go get' may unexpectedly fallback to insecure git in cmd/go
GO-2024-2825: Arbitrary code execution during build on Darwin in cmd/go
GO-2024-2962: Output of "go env" does not sanitize values in cmd/go
GO-2025-3828: Unexpected command execution in untrusted VCS repositories in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Jan 19, 2021 GO-2023-1839 +12 more
GO-2023-1839: Code injection via go command with cgo in cmd/go
GO-2023-1841: Improper handling of non-optional LDFLAGS in go command with cgo in cmd/go
GO-2023-1842: Improper sanitization of LDFLAGS with embedded spaces in go command with cgo in cmd/go
GO-2023-2095: Arbitrary code execution during build via line directives in cmd/go
GO-2023-2383: Command 'go get' may unexpectedly fallback to insecure git in cmd/go
GO-2024-2825: Arbitrary code execution during build on Darwin in cmd/go
GO-2024-2962: Output of "go env" does not sanitize values in cmd/go
GO-2025-3828: Unexpected command execution in untrusted VCS repositories in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Dec 3, 2020 GO-2021-0068 +13 more
GO-2021-0068: Arbitrary code injection via the go command with cgo on Windows in cmd/go
GO-2023-1839: Code injection via go command with cgo in cmd/go
GO-2023-1841: Improper handling of non-optional LDFLAGS in go command with cgo in cmd/go
GO-2023-1842: Improper sanitization of LDFLAGS with embedded spaces in go command with cgo in cmd/go
GO-2023-2095: Arbitrary code execution during build via line directives in cmd/go
GO-2023-2383: Command 'go get' may unexpectedly fallback to insecure git in cmd/go
GO-2024-2825: Arbitrary code execution during build on Darwin in cmd/go
GO-2024-2962: Output of "go env" does not sanitize values in cmd/go
GO-2025-3828: Unexpected command execution in untrusted VCS repositories in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Nov 12, 2020 GO-2021-0068 +13 more
GO-2021-0068: Arbitrary code injection via the go command with cgo on Windows in cmd/go
GO-2023-1839: Code injection via go command with cgo in cmd/go
GO-2023-1841: Improper handling of non-optional LDFLAGS in go command with cgo in cmd/go
GO-2023-1842: Improper sanitization of LDFLAGS with embedded spaces in go command with cgo in cmd/go
GO-2023-2095: Arbitrary code execution during build via line directives in cmd/go
GO-2023-2383: Command 'go get' may unexpectedly fallback to insecure git in cmd/go
GO-2024-2825: Arbitrary code execution during build on Darwin in cmd/go
GO-2024-2962: Output of "go env" does not sanitize values in cmd/go
GO-2025-3828: Unexpected command execution in untrusted VCS repositories in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Nov 5, 2020 GO-2021-0068 +15 more
GO-2021-0068: Arbitrary code injection via the go command with cgo on Windows in cmd/go
GO-2022-0475: Arbitrary code execution in go command with cgo in cmd/go and cmd/cgo
GO-2022-0476: Arbitrary code execution via the go command with cgo in cmd/go
GO-2023-1839: Code injection via go command with cgo in cmd/go
GO-2023-1841: Improper handling of non-optional LDFLAGS in go command with cgo in cmd/go
GO-2023-1842: Improper sanitization of LDFLAGS with embedded spaces in go command with cgo in cmd/go
GO-2023-2095: Arbitrary code execution during build via line directives in cmd/go
GO-2023-2383: Command 'go get' may unexpectedly fallback to insecure git in cmd/go
GO-2024-2825: Arbitrary code execution during build on Darwin in cmd/go
GO-2024-2962: Output of "go env" does not sanitize values in cmd/go
GO-2025-3828: Unexpected command execution in untrusted VCS repositories in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Oct 14, 2020 GO-2021-0068 +15 more
GO-2021-0068: Arbitrary code injection via the go command with cgo on Windows in cmd/go
GO-2022-0475: Arbitrary code execution in go command with cgo in cmd/go and cmd/cgo
GO-2022-0476: Arbitrary code execution via the go command with cgo in cmd/go
GO-2023-1839: Code injection via go command with cgo in cmd/go
GO-2023-1841: Improper handling of non-optional LDFLAGS in go command with cgo in cmd/go
GO-2023-1842: Improper sanitization of LDFLAGS with embedded spaces in go command with cgo in cmd/go
GO-2023-2095: Arbitrary code execution during build via line directives in cmd/go
GO-2023-2383: Command 'go get' may unexpectedly fallback to insecure git in cmd/go
GO-2024-2825: Arbitrary code execution during build on Darwin in cmd/go
GO-2024-2962: Output of "go env" does not sanitize values in cmd/go
GO-2025-3828: Unexpected command execution in untrusted VCS repositories in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Sep 9, 2020 GO-2021-0068 +15 more
GO-2021-0068: Arbitrary code injection via the go command with cgo on Windows in cmd/go
GO-2022-0475: Arbitrary code execution in go command with cgo in cmd/go and cmd/cgo
GO-2022-0476: Arbitrary code execution via the go command with cgo in cmd/go
GO-2023-1839: Code injection via go command with cgo in cmd/go
GO-2023-1841: Improper handling of non-optional LDFLAGS in go command with cgo in cmd/go
GO-2023-1842: Improper sanitization of LDFLAGS with embedded spaces in go command with cgo in cmd/go
GO-2023-2095: Arbitrary code execution during build via line directives in cmd/go
GO-2023-2383: Command 'go get' may unexpectedly fallback to insecure git in cmd/go
GO-2024-2825: Arbitrary code execution during build on Darwin in cmd/go
GO-2024-2962: Output of "go env" does not sanitize values in cmd/go
GO-2025-3828: Unexpected command execution in untrusted VCS repositories in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Sep 1, 2020 GO-2021-0068 +15 more
GO-2021-0068: Arbitrary code injection via the go command with cgo on Windows in cmd/go
GO-2022-0475: Arbitrary code execution in go command with cgo in cmd/go and cmd/cgo
GO-2022-0476: Arbitrary code execution via the go command with cgo in cmd/go
GO-2023-1839: Code injection via go command with cgo in cmd/go
GO-2023-1841: Improper handling of non-optional LDFLAGS in go command with cgo in cmd/go
GO-2023-1842: Improper sanitization of LDFLAGS with embedded spaces in go command with cgo in cmd/go
GO-2023-2095: Arbitrary code execution during build via line directives in cmd/go
GO-2023-2383: Command 'go get' may unexpectedly fallback to insecure git in cmd/go
GO-2024-2825: Arbitrary code execution during build on Darwin in cmd/go
GO-2024-2962: Output of "go env" does not sanitize values in cmd/go
GO-2025-3828: Unexpected command execution in untrusted VCS repositories in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Aug 11, 2020 GO-2021-0068 +15 more
GO-2021-0068: Arbitrary code injection via the go command with cgo on Windows in cmd/go
GO-2022-0475: Arbitrary code execution in go command with cgo in cmd/go and cmd/cgo
GO-2022-0476: Arbitrary code execution via the go command with cgo in cmd/go
GO-2023-1839: Code injection via go command with cgo in cmd/go
GO-2023-1841: Improper handling of non-optional LDFLAGS in go command with cgo in cmd/go
GO-2023-1842: Improper sanitization of LDFLAGS with embedded spaces in go command with cgo in cmd/go
GO-2023-2095: Arbitrary code execution during build via line directives in cmd/go
GO-2023-2383: Command 'go get' may unexpectedly fallback to insecure git in cmd/go
GO-2024-2825: Arbitrary code execution during build on Darwin in cmd/go
GO-2024-2962: Output of "go env" does not sanitize values in cmd/go
GO-2025-3828: Unexpected command execution in untrusted VCS repositories in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Aug 7, 2020 GO-2021-0068 +15 more
GO-2021-0068: Arbitrary code injection via the go command with cgo on Windows in cmd/go
GO-2022-0475: Arbitrary code execution in go command with cgo in cmd/go and cmd/cgo
GO-2022-0476: Arbitrary code execution via the go command with cgo in cmd/go
GO-2023-1839: Code injection via go command with cgo in cmd/go
GO-2023-1841: Improper handling of non-optional LDFLAGS in go command with cgo in cmd/go
GO-2023-1842: Improper sanitization of LDFLAGS with embedded spaces in go command with cgo in cmd/go
GO-2023-2095: Arbitrary code execution during build via line directives in cmd/go
GO-2023-2383: Command 'go get' may unexpectedly fallback to insecure git in cmd/go
GO-2024-2825: Arbitrary code execution during build on Darwin in cmd/go
GO-2024-2962: Output of "go env" does not sanitize values in cmd/go
GO-2025-3828: Unexpected command execution in untrusted VCS repositories in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Jul 24, 2020 GO-2021-0068 +15 more
GO-2021-0068: Arbitrary code injection via the go command with cgo on Windows in cmd/go
GO-2022-0475: Arbitrary code execution in go command with cgo in cmd/go and cmd/cgo
GO-2022-0476: Arbitrary code execution via the go command with cgo in cmd/go
GO-2023-1839: Code injection via go command with cgo in cmd/go
GO-2023-1841: Improper handling of non-optional LDFLAGS in go command with cgo in cmd/go
GO-2023-1842: Improper sanitization of LDFLAGS with embedded spaces in go command with cgo in cmd/go
GO-2023-2095: Arbitrary code execution during build via line directives in cmd/go
GO-2023-2383: Command 'go get' may unexpectedly fallback to insecure git in cmd/go
GO-2024-2825: Arbitrary code execution during build on Darwin in cmd/go
GO-2024-2962: Output of "go env" does not sanitize values in cmd/go
GO-2025-3828: Unexpected command execution in untrusted VCS repositories in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Jun 10, 2020 GO-2021-0068 +15 more
GO-2021-0068: Arbitrary code injection via the go command with cgo on Windows in cmd/go
GO-2022-0475: Arbitrary code execution in go command with cgo in cmd/go and cmd/cgo
GO-2022-0476: Arbitrary code execution via the go command with cgo in cmd/go
GO-2023-1839: Code injection via go command with cgo in cmd/go
GO-2023-1841: Improper handling of non-optional LDFLAGS in go command with cgo in cmd/go
GO-2023-1842: Improper sanitization of LDFLAGS with embedded spaces in go command with cgo in cmd/go
GO-2023-2095: Arbitrary code execution during build via line directives in cmd/go
GO-2023-2383: Command 'go get' may unexpectedly fallback to insecure git in cmd/go
GO-2024-2825: Arbitrary code execution during build on Darwin in cmd/go
GO-2024-2962: Output of "go env" does not sanitize values in cmd/go
GO-2025-3828: Unexpected command execution in untrusted VCS repositories in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Feb 4, 2021 GO-2023-1839 +12 more
GO-2023-1839: Code injection via go command with cgo in cmd/go
GO-2023-1841: Improper handling of non-optional LDFLAGS in go command with cgo in cmd/go
GO-2023-1842: Improper sanitization of LDFLAGS with embedded spaces in go command with cgo in cmd/go
GO-2023-2095: Arbitrary code execution during build via line directives in cmd/go
GO-2023-2383: Command 'go get' may unexpectedly fallback to insecure git in cmd/go
GO-2024-2825: Arbitrary code execution during build on Darwin in cmd/go
GO-2024-2962: Output of "go env" does not sanitize values in cmd/go
GO-2025-3828: Unexpected command execution in untrusted VCS repositories in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Jan 19, 2021 GO-2023-1839 +12 more
GO-2023-1839: Code injection via go command with cgo in cmd/go
GO-2023-1841: Improper handling of non-optional LDFLAGS in go command with cgo in cmd/go
GO-2023-1842: Improper sanitization of LDFLAGS with embedded spaces in go command with cgo in cmd/go
GO-2023-2095: Arbitrary code execution during build via line directives in cmd/go
GO-2023-2383: Command 'go get' may unexpectedly fallback to insecure git in cmd/go
GO-2024-2825: Arbitrary code execution during build on Darwin in cmd/go
GO-2024-2962: Output of "go env" does not sanitize values in cmd/go
GO-2025-3828: Unexpected command execution in untrusted VCS repositories in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Dec 3, 2020 GO-2021-0068 +13 more
GO-2021-0068: Arbitrary code injection via the go command with cgo on Windows in cmd/go
GO-2023-1839: Code injection via go command with cgo in cmd/go
GO-2023-1841: Improper handling of non-optional LDFLAGS in go command with cgo in cmd/go
GO-2023-1842: Improper sanitization of LDFLAGS with embedded spaces in go command with cgo in cmd/go
GO-2023-2095: Arbitrary code execution during build via line directives in cmd/go
GO-2023-2383: Command 'go get' may unexpectedly fallback to insecure git in cmd/go
GO-2024-2825: Arbitrary code execution during build on Darwin in cmd/go
GO-2024-2962: Output of "go env" does not sanitize values in cmd/go
GO-2025-3828: Unexpected command execution in untrusted VCS repositories in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Nov 12, 2020 GO-2021-0068 +13 more
GO-2021-0068: Arbitrary code injection via the go command with cgo on Windows in cmd/go
GO-2023-1839: Code injection via go command with cgo in cmd/go
GO-2023-1841: Improper handling of non-optional LDFLAGS in go command with cgo in cmd/go
GO-2023-1842: Improper sanitization of LDFLAGS with embedded spaces in go command with cgo in cmd/go
GO-2023-2095: Arbitrary code execution during build via line directives in cmd/go
GO-2023-2383: Command 'go get' may unexpectedly fallback to insecure git in cmd/go
GO-2024-2825: Arbitrary code execution during build on Darwin in cmd/go
GO-2024-2962: Output of "go env" does not sanitize values in cmd/go
GO-2025-3828: Unexpected command execution in untrusted VCS repositories in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Nov 5, 2020 GO-2021-0068 +15 more
GO-2021-0068: Arbitrary code injection via the go command with cgo on Windows in cmd/go
GO-2022-0475: Arbitrary code execution in go command with cgo in cmd/go and cmd/cgo
GO-2022-0476: Arbitrary code execution via the go command with cgo in cmd/go
GO-2023-1839: Code injection via go command with cgo in cmd/go
GO-2023-1841: Improper handling of non-optional LDFLAGS in go command with cgo in cmd/go
GO-2023-1842: Improper sanitization of LDFLAGS with embedded spaces in go command with cgo in cmd/go
GO-2023-2095: Arbitrary code execution during build via line directives in cmd/go
GO-2023-2383: Command 'go get' may unexpectedly fallback to insecure git in cmd/go
GO-2024-2825: Arbitrary code execution during build on Darwin in cmd/go
GO-2024-2962: Output of "go env" does not sanitize values in cmd/go
GO-2025-3828: Unexpected command execution in untrusted VCS repositories in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Oct 14, 2020 GO-2021-0068 +15 more
GO-2021-0068: Arbitrary code injection via the go command with cgo on Windows in cmd/go
GO-2022-0475: Arbitrary code execution in go command with cgo in cmd/go and cmd/cgo
GO-2022-0476: Arbitrary code execution via the go command with cgo in cmd/go
GO-2023-1839: Code injection via go command with cgo in cmd/go
GO-2023-1841: Improper handling of non-optional LDFLAGS in go command with cgo in cmd/go
GO-2023-1842: Improper sanitization of LDFLAGS with embedded spaces in go command with cgo in cmd/go
GO-2023-2095: Arbitrary code execution during build via line directives in cmd/go
GO-2023-2383: Command 'go get' may unexpectedly fallback to insecure git in cmd/go
GO-2024-2825: Arbitrary code execution during build on Darwin in cmd/go
GO-2024-2962: Output of "go env" does not sanitize values in cmd/go
GO-2025-3828: Unexpected command execution in untrusted VCS repositories in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Sep 9, 2020 GO-2021-0068 +15 more
GO-2021-0068: Arbitrary code injection via the go command with cgo on Windows in cmd/go
GO-2022-0475: Arbitrary code execution in go command with cgo in cmd/go and cmd/cgo
GO-2022-0476: Arbitrary code execution via the go command with cgo in cmd/go
GO-2023-1839: Code injection via go command with cgo in cmd/go
GO-2023-1841: Improper handling of non-optional LDFLAGS in go command with cgo in cmd/go
GO-2023-1842: Improper sanitization of LDFLAGS with embedded spaces in go command with cgo in cmd/go
GO-2023-2095: Arbitrary code execution during build via line directives in cmd/go
GO-2023-2383: Command 'go get' may unexpectedly fallback to insecure git in cmd/go
GO-2024-2825: Arbitrary code execution during build on Darwin in cmd/go
GO-2024-2962: Output of "go env" does not sanitize values in cmd/go
GO-2025-3828: Unexpected command execution in untrusted VCS repositories in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Sep 1, 2020 GO-2021-0068 +15 more
GO-2021-0068: Arbitrary code injection via the go command with cgo on Windows in cmd/go
GO-2022-0475: Arbitrary code execution in go command with cgo in cmd/go and cmd/cgo
GO-2022-0476: Arbitrary code execution via the go command with cgo in cmd/go
GO-2023-1839: Code injection via go command with cgo in cmd/go
GO-2023-1841: Improper handling of non-optional LDFLAGS in go command with cgo in cmd/go
GO-2023-1842: Improper sanitization of LDFLAGS with embedded spaces in go command with cgo in cmd/go
GO-2023-2095: Arbitrary code execution during build via line directives in cmd/go
GO-2023-2383: Command 'go get' may unexpectedly fallback to insecure git in cmd/go
GO-2024-2825: Arbitrary code execution during build on Darwin in cmd/go
GO-2024-2962: Output of "go env" does not sanitize values in cmd/go
GO-2025-3828: Unexpected command execution in untrusted VCS repositories in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Aug 6, 2020 GO-2021-0068 +15 more
GO-2021-0068: Arbitrary code injection via the go command with cgo on Windows in cmd/go
GO-2022-0475: Arbitrary code execution in go command with cgo in cmd/go and cmd/cgo
GO-2022-0476: Arbitrary code execution via the go command with cgo in cmd/go
GO-2023-1839: Code injection via go command with cgo in cmd/go
GO-2023-1841: Improper handling of non-optional LDFLAGS in go command with cgo in cmd/go
GO-2023-1842: Improper sanitization of LDFLAGS with embedded spaces in go command with cgo in cmd/go
GO-2023-2095: Arbitrary code execution during build via line directives in cmd/go
GO-2023-2383: Command 'go get' may unexpectedly fallback to insecure git in cmd/go
GO-2024-2825: Arbitrary code execution during build on Darwin in cmd/go
GO-2024-2962: Output of "go env" does not sanitize values in cmd/go
GO-2025-3828: Unexpected command execution in untrusted VCS repositories in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Jul 16, 2020 GO-2021-0068 +15 more
GO-2021-0068: Arbitrary code injection via the go command with cgo on Windows in cmd/go
GO-2022-0475: Arbitrary code execution in go command with cgo in cmd/go and cmd/cgo
GO-2022-0476: Arbitrary code execution via the go command with cgo in cmd/go
GO-2023-1839: Code injection via go command with cgo in cmd/go
GO-2023-1841: Improper handling of non-optional LDFLAGS in go command with cgo in cmd/go
GO-2023-1842: Improper sanitization of LDFLAGS with embedded spaces in go command with cgo in cmd/go
GO-2023-2095: Arbitrary code execution during build via line directives in cmd/go
GO-2023-2383: Command 'go get' may unexpectedly fallback to insecure git in cmd/go
GO-2024-2825: Arbitrary code execution during build on Darwin in cmd/go
GO-2024-2962: Output of "go env" does not sanitize values in cmd/go
GO-2025-3828: Unexpected command execution in untrusted VCS repositories in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Jul 14, 2020 GO-2021-0068 +15 more
GO-2021-0068: Arbitrary code injection via the go command with cgo on Windows in cmd/go
GO-2022-0475: Arbitrary code execution in go command with cgo in cmd/go and cmd/cgo
GO-2022-0476: Arbitrary code execution via the go command with cgo in cmd/go
GO-2023-1839: Code injection via go command with cgo in cmd/go
GO-2023-1841: Improper handling of non-optional LDFLAGS in go command with cgo in cmd/go
GO-2023-1842: Improper sanitization of LDFLAGS with embedded spaces in go command with cgo in cmd/go
GO-2023-2095: Arbitrary code execution during build via line directives in cmd/go
GO-2023-2383: Command 'go get' may unexpectedly fallback to insecure git in cmd/go
GO-2024-2825: Arbitrary code execution during build on Darwin in cmd/go
GO-2024-2962: Output of "go env" does not sanitize values in cmd/go
GO-2025-3828: Unexpected command execution in untrusted VCS repositories in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Jun 1, 2020 GO-2021-0068 +15 more
GO-2021-0068: Arbitrary code injection via the go command with cgo on Windows in cmd/go
GO-2022-0475: Arbitrary code execution in go command with cgo in cmd/go and cmd/cgo
GO-2022-0476: Arbitrary code execution via the go command with cgo in cmd/go
GO-2023-1839: Code injection via go command with cgo in cmd/go
GO-2023-1841: Improper handling of non-optional LDFLAGS in go command with cgo in cmd/go
GO-2023-1842: Improper sanitization of LDFLAGS with embedded spaces in go command with cgo in cmd/go
GO-2023-2095: Arbitrary code execution during build via line directives in cmd/go
GO-2023-2383: Command 'go get' may unexpectedly fallback to insecure git in cmd/go
GO-2024-2825: Arbitrary code execution during build on Darwin in cmd/go
GO-2024-2962: Output of "go env" does not sanitize values in cmd/go
GO-2025-3828: Unexpected command execution in untrusted VCS repositories in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
May 14, 2020 GO-2021-0068 +15 more
GO-2021-0068: Arbitrary code injection via the go command with cgo on Windows in cmd/go
GO-2022-0475: Arbitrary code execution in go command with cgo in cmd/go and cmd/cgo
GO-2022-0476: Arbitrary code execution via the go command with cgo in cmd/go
GO-2023-1839: Code injection via go command with cgo in cmd/go
GO-2023-1841: Improper handling of non-optional LDFLAGS in go command with cgo in cmd/go
GO-2023-1842: Improper sanitization of LDFLAGS with embedded spaces in go command with cgo in cmd/go
GO-2023-2095: Arbitrary code execution during build via line directives in cmd/go
GO-2023-2383: Command 'go get' may unexpectedly fallback to insecure git in cmd/go
GO-2024-2825: Arbitrary code execution during build on Darwin in cmd/go
GO-2024-2962: Output of "go env" does not sanitize values in cmd/go
GO-2025-3828: Unexpected command execution in untrusted VCS repositories in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Apr 8, 2020 GO-2021-0068 +15 more
GO-2021-0068: Arbitrary code injection via the go command with cgo on Windows in cmd/go
GO-2022-0475: Arbitrary code execution in go command with cgo in cmd/go and cmd/cgo
GO-2022-0476: Arbitrary code execution via the go command with cgo in cmd/go
GO-2023-1839: Code injection via go command with cgo in cmd/go
GO-2023-1841: Improper handling of non-optional LDFLAGS in go command with cgo in cmd/go
GO-2023-1842: Improper sanitization of LDFLAGS with embedded spaces in go command with cgo in cmd/go
GO-2023-2095: Arbitrary code execution during build via line directives in cmd/go
GO-2023-2383: Command 'go get' may unexpectedly fallback to insecure git in cmd/go
GO-2024-2825: Arbitrary code execution during build on Darwin in cmd/go
GO-2024-2962: Output of "go env" does not sanitize values in cmd/go
GO-2025-3828: Unexpected command execution in untrusted VCS repositories in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Mar 19, 2020 GO-2021-0068 +15 more
GO-2021-0068: Arbitrary code injection via the go command with cgo on Windows in cmd/go
GO-2022-0475: Arbitrary code execution in go command with cgo in cmd/go and cmd/cgo
GO-2022-0476: Arbitrary code execution via the go command with cgo in cmd/go
GO-2023-1839: Code injection via go command with cgo in cmd/go
GO-2023-1841: Improper handling of non-optional LDFLAGS in go command with cgo in cmd/go
GO-2023-1842: Improper sanitization of LDFLAGS with embedded spaces in go command with cgo in cmd/go
GO-2023-2095: Arbitrary code execution during build via line directives in cmd/go
GO-2023-2383: Command 'go get' may unexpectedly fallback to insecure git in cmd/go
GO-2024-2825: Arbitrary code execution during build on Darwin in cmd/go
GO-2024-2962: Output of "go env" does not sanitize values in cmd/go
GO-2025-3828: Unexpected command execution in untrusted VCS repositories in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Feb 25, 2020 GO-2021-0068 +15 more
GO-2021-0068: Arbitrary code injection via the go command with cgo on Windows in cmd/go
GO-2022-0475: Arbitrary code execution in go command with cgo in cmd/go and cmd/cgo
GO-2022-0476: Arbitrary code execution via the go command with cgo in cmd/go
GO-2023-1839: Code injection via go command with cgo in cmd/go
GO-2023-1841: Improper handling of non-optional LDFLAGS in go command with cgo in cmd/go
GO-2023-1842: Improper sanitization of LDFLAGS with embedded spaces in go command with cgo in cmd/go
GO-2023-2095: Arbitrary code execution during build via line directives in cmd/go
GO-2023-2383: Command 'go get' may unexpectedly fallback to insecure git in cmd/go
GO-2024-2825: Arbitrary code execution during build on Darwin in cmd/go
GO-2024-2962: Output of "go env" does not sanitize values in cmd/go
GO-2025-3828: Unexpected command execution in untrusted VCS repositories in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Feb 5, 2020 GO-2021-0068 +15 more
GO-2021-0068: Arbitrary code injection via the go command with cgo on Windows in cmd/go
GO-2022-0475: Arbitrary code execution in go command with cgo in cmd/go and cmd/cgo
GO-2022-0476: Arbitrary code execution via the go command with cgo in cmd/go
GO-2023-1839: Code injection via go command with cgo in cmd/go
GO-2023-1841: Improper handling of non-optional LDFLAGS in go command with cgo in cmd/go
GO-2023-1842: Improper sanitization of LDFLAGS with embedded spaces in go command with cgo in cmd/go
GO-2023-2095: Arbitrary code execution during build via line directives in cmd/go
GO-2023-2383: Command 'go get' may unexpectedly fallback to insecure git in cmd/go
GO-2024-2825: Arbitrary code execution during build on Darwin in cmd/go
GO-2024-2962: Output of "go env" does not sanitize values in cmd/go
GO-2025-3828: Unexpected command execution in untrusted VCS repositories in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Dec 17, 2019 GO-2021-0068 +15 more
GO-2021-0068: Arbitrary code injection via the go command with cgo on Windows in cmd/go
GO-2022-0475: Arbitrary code execution in go command with cgo in cmd/go and cmd/cgo
GO-2022-0476: Arbitrary code execution via the go command with cgo in cmd/go
GO-2023-1839: Code injection via go command with cgo in cmd/go
GO-2023-1841: Improper handling of non-optional LDFLAGS in go command with cgo in cmd/go
GO-2023-1842: Improper sanitization of LDFLAGS with embedded spaces in go command with cgo in cmd/go
GO-2023-2095: Arbitrary code execution during build via line directives in cmd/go
GO-2023-2383: Command 'go get' may unexpectedly fallback to insecure git in cmd/go
GO-2024-2825: Arbitrary code execution during build on Darwin in cmd/go
GO-2024-2962: Output of "go env" does not sanitize values in cmd/go
GO-2025-3828: Unexpected command execution in untrusted VCS repositories in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Aug 6, 2020 GO-2021-0068 +15 more
GO-2021-0068: Arbitrary code injection via the go command with cgo on Windows in cmd/go
GO-2022-0475: Arbitrary code execution in go command with cgo in cmd/go and cmd/cgo
GO-2022-0476: Arbitrary code execution via the go command with cgo in cmd/go
GO-2023-1839: Code injection via go command with cgo in cmd/go
GO-2023-1841: Improper handling of non-optional LDFLAGS in go command with cgo in cmd/go
GO-2023-1842: Improper sanitization of LDFLAGS with embedded spaces in go command with cgo in cmd/go
GO-2023-2095: Arbitrary code execution during build via line directives in cmd/go
GO-2023-2383: Command 'go get' may unexpectedly fallback to insecure git in cmd/go
GO-2024-2825: Arbitrary code execution during build on Darwin in cmd/go
GO-2024-2962: Output of "go env" does not sanitize values in cmd/go
GO-2025-3828: Unexpected command execution in untrusted VCS repositories in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Jul 16, 2020 GO-2021-0068 +15 more
GO-2021-0068: Arbitrary code injection via the go command with cgo on Windows in cmd/go
GO-2022-0475: Arbitrary code execution in go command with cgo in cmd/go and cmd/cgo
GO-2022-0476: Arbitrary code execution via the go command with cgo in cmd/go
GO-2023-1839: Code injection via go command with cgo in cmd/go
GO-2023-1841: Improper handling of non-optional LDFLAGS in go command with cgo in cmd/go
GO-2023-1842: Improper sanitization of LDFLAGS with embedded spaces in go command with cgo in cmd/go
GO-2023-2095: Arbitrary code execution during build via line directives in cmd/go
GO-2023-2383: Command 'go get' may unexpectedly fallback to insecure git in cmd/go
GO-2024-2825: Arbitrary code execution during build on Darwin in cmd/go
GO-2024-2962: Output of "go env" does not sanitize values in cmd/go
GO-2025-3828: Unexpected command execution in untrusted VCS repositories in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Jul 14, 2020 GO-2021-0068 +15 more
GO-2021-0068: Arbitrary code injection via the go command with cgo on Windows in cmd/go
GO-2022-0475: Arbitrary code execution in go command with cgo in cmd/go and cmd/cgo
GO-2022-0476: Arbitrary code execution via the go command with cgo in cmd/go
GO-2023-1839: Code injection via go command with cgo in cmd/go
GO-2023-1841: Improper handling of non-optional LDFLAGS in go command with cgo in cmd/go
GO-2023-1842: Improper sanitization of LDFLAGS with embedded spaces in go command with cgo in cmd/go
GO-2023-2095: Arbitrary code execution during build via line directives in cmd/go
GO-2023-2383: Command 'go get' may unexpectedly fallback to insecure git in cmd/go
GO-2024-2825: Arbitrary code execution during build on Darwin in cmd/go
GO-2024-2962: Output of "go env" does not sanitize values in cmd/go
GO-2025-3828: Unexpected command execution in untrusted VCS repositories in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Jun 1, 2020 GO-2021-0068 +15 more
GO-2021-0068: Arbitrary code injection via the go command with cgo on Windows in cmd/go
GO-2022-0475: Arbitrary code execution in go command with cgo in cmd/go and cmd/cgo
GO-2022-0476: Arbitrary code execution via the go command with cgo in cmd/go
GO-2023-1839: Code injection via go command with cgo in cmd/go
GO-2023-1841: Improper handling of non-optional LDFLAGS in go command with cgo in cmd/go
GO-2023-1842: Improper sanitization of LDFLAGS with embedded spaces in go command with cgo in cmd/go
GO-2023-2095: Arbitrary code execution during build via line directives in cmd/go
GO-2023-2383: Command 'go get' may unexpectedly fallback to insecure git in cmd/go
GO-2024-2825: Arbitrary code execution during build on Darwin in cmd/go
GO-2024-2962: Output of "go env" does not sanitize values in cmd/go
GO-2025-3828: Unexpected command execution in untrusted VCS repositories in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
May 14, 2020 GO-2021-0068 +15 more
GO-2021-0068: Arbitrary code injection via the go command with cgo on Windows in cmd/go
GO-2022-0475: Arbitrary code execution in go command with cgo in cmd/go and cmd/cgo
GO-2022-0476: Arbitrary code execution via the go command with cgo in cmd/go
GO-2023-1839: Code injection via go command with cgo in cmd/go
GO-2023-1841: Improper handling of non-optional LDFLAGS in go command with cgo in cmd/go
GO-2023-1842: Improper sanitization of LDFLAGS with embedded spaces in go command with cgo in cmd/go
GO-2023-2095: Arbitrary code execution during build via line directives in cmd/go
GO-2023-2383: Command 'go get' may unexpectedly fallback to insecure git in cmd/go
GO-2024-2825: Arbitrary code execution during build on Darwin in cmd/go
GO-2024-2962: Output of "go env" does not sanitize values in cmd/go
GO-2025-3828: Unexpected command execution in untrusted VCS repositories in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Apr 8, 2020 GO-2021-0068 +15 more
GO-2021-0068: Arbitrary code injection via the go command with cgo on Windows in cmd/go
GO-2022-0475: Arbitrary code execution in go command with cgo in cmd/go and cmd/cgo
GO-2022-0476: Arbitrary code execution via the go command with cgo in cmd/go
GO-2023-1839: Code injection via go command with cgo in cmd/go
GO-2023-1841: Improper handling of non-optional LDFLAGS in go command with cgo in cmd/go
GO-2023-1842: Improper sanitization of LDFLAGS with embedded spaces in go command with cgo in cmd/go
GO-2023-2095: Arbitrary code execution during build via line directives in cmd/go
GO-2023-2383: Command 'go get' may unexpectedly fallback to insecure git in cmd/go
GO-2024-2825: Arbitrary code execution during build on Darwin in cmd/go
GO-2024-2962: Output of "go env" does not sanitize values in cmd/go
GO-2025-3828: Unexpected command execution in untrusted VCS repositories in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Mar 19, 2020 GO-2021-0068 +15 more
GO-2021-0068: Arbitrary code injection via the go command with cgo on Windows in cmd/go
GO-2022-0475: Arbitrary code execution in go command with cgo in cmd/go and cmd/cgo
GO-2022-0476: Arbitrary code execution via the go command with cgo in cmd/go
GO-2023-1839: Code injection via go command with cgo in cmd/go
GO-2023-1841: Improper handling of non-optional LDFLAGS in go command with cgo in cmd/go
GO-2023-1842: Improper sanitization of LDFLAGS with embedded spaces in go command with cgo in cmd/go
GO-2023-2095: Arbitrary code execution during build via line directives in cmd/go
GO-2023-2383: Command 'go get' may unexpectedly fallback to insecure git in cmd/go
GO-2024-2825: Arbitrary code execution during build on Darwin in cmd/go
GO-2024-2962: Output of "go env" does not sanitize values in cmd/go
GO-2025-3828: Unexpected command execution in untrusted VCS repositories in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Feb 12, 2020 GO-2021-0068 +15 more
GO-2021-0068: Arbitrary code injection via the go command with cgo on Windows in cmd/go
GO-2022-0475: Arbitrary code execution in go command with cgo in cmd/go and cmd/cgo
GO-2022-0476: Arbitrary code execution via the go command with cgo in cmd/go
GO-2023-1839: Code injection via go command with cgo in cmd/go
GO-2023-1841: Improper handling of non-optional LDFLAGS in go command with cgo in cmd/go
GO-2023-1842: Improper sanitization of LDFLAGS with embedded spaces in go command with cgo in cmd/go
GO-2023-2095: Arbitrary code execution during build via line directives in cmd/go
GO-2023-2383: Command 'go get' may unexpectedly fallback to insecure git in cmd/go
GO-2024-2825: Arbitrary code execution during build on Darwin in cmd/go
GO-2024-2962: Output of "go env" does not sanitize values in cmd/go
GO-2025-3828: Unexpected command execution in untrusted VCS repositories in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Jan 27, 2020 GO-2021-0068 +15 more
GO-2021-0068: Arbitrary code injection via the go command with cgo on Windows in cmd/go
GO-2022-0475: Arbitrary code execution in go command with cgo in cmd/go and cmd/cgo
GO-2022-0476: Arbitrary code execution via the go command with cgo in cmd/go
GO-2023-1839: Code injection via go command with cgo in cmd/go
GO-2023-1841: Improper handling of non-optional LDFLAGS in go command with cgo in cmd/go
GO-2023-1842: Improper sanitization of LDFLAGS with embedded spaces in go command with cgo in cmd/go
GO-2023-2095: Arbitrary code execution during build via line directives in cmd/go
GO-2023-2383: Command 'go get' may unexpectedly fallback to insecure git in cmd/go
GO-2024-2825: Arbitrary code execution during build on Darwin in cmd/go
GO-2024-2962: Output of "go env" does not sanitize values in cmd/go
GO-2025-3828: Unexpected command execution in untrusted VCS repositories in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Jan 9, 2020 GO-2021-0068 +15 more
GO-2021-0068: Arbitrary code injection via the go command with cgo on Windows in cmd/go
GO-2022-0475: Arbitrary code execution in go command with cgo in cmd/go and cmd/cgo
GO-2022-0476: Arbitrary code execution via the go command with cgo in cmd/go
GO-2023-1839: Code injection via go command with cgo in cmd/go
GO-2023-1841: Improper handling of non-optional LDFLAGS in go command with cgo in cmd/go
GO-2023-1842: Improper sanitization of LDFLAGS with embedded spaces in go command with cgo in cmd/go
GO-2023-2095: Arbitrary code execution during build via line directives in cmd/go
GO-2023-2383: Command 'go get' may unexpectedly fallback to insecure git in cmd/go
GO-2024-2825: Arbitrary code execution during build on Darwin in cmd/go
GO-2024-2962: Output of "go env" does not sanitize values in cmd/go
GO-2025-3828: Unexpected command execution in untrusted VCS repositories in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Dec 4, 2019 GO-2021-0068 +15 more
GO-2021-0068: Arbitrary code injection via the go command with cgo on Windows in cmd/go
GO-2022-0475: Arbitrary code execution in go command with cgo in cmd/go and cmd/cgo
GO-2022-0476: Arbitrary code execution via the go command with cgo in cmd/go
GO-2023-1839: Code injection via go command with cgo in cmd/go
GO-2023-1841: Improper handling of non-optional LDFLAGS in go command with cgo in cmd/go
GO-2023-1842: Improper sanitization of LDFLAGS with embedded spaces in go command with cgo in cmd/go
GO-2023-2095: Arbitrary code execution during build via line directives in cmd/go
GO-2023-2383: Command 'go get' may unexpectedly fallback to insecure git in cmd/go
GO-2024-2825: Arbitrary code execution during build on Darwin in cmd/go
GO-2024-2962: Output of "go env" does not sanitize values in cmd/go
GO-2025-3828: Unexpected command execution in untrusted VCS repositories in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Oct 31, 2019 GO-2021-0068 +15 more
GO-2021-0068: Arbitrary code injection via the go command with cgo on Windows in cmd/go
GO-2022-0475: Arbitrary code execution in go command with cgo in cmd/go and cmd/cgo
GO-2022-0476: Arbitrary code execution via the go command with cgo in cmd/go
GO-2023-1839: Code injection via go command with cgo in cmd/go
GO-2023-1841: Improper handling of non-optional LDFLAGS in go command with cgo in cmd/go
GO-2023-1842: Improper sanitization of LDFLAGS with embedded spaces in go command with cgo in cmd/go
GO-2023-2095: Arbitrary code execution during build via line directives in cmd/go
GO-2023-2383: Command 'go get' may unexpectedly fallback to insecure git in cmd/go
GO-2024-2825: Arbitrary code execution during build on Darwin in cmd/go
GO-2024-2962: Output of "go env" does not sanitize values in cmd/go
GO-2025-3828: Unexpected command execution in untrusted VCS repositories in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Oct 17, 2019 GO-2021-0068 +15 more
GO-2021-0068: Arbitrary code injection via the go command with cgo on Windows in cmd/go
GO-2022-0475: Arbitrary code execution in go command with cgo in cmd/go and cmd/cgo
GO-2022-0476: Arbitrary code execution via the go command with cgo in cmd/go
GO-2023-1839: Code injection via go command with cgo in cmd/go
GO-2023-1841: Improper handling of non-optional LDFLAGS in go command with cgo in cmd/go
GO-2023-1842: Improper sanitization of LDFLAGS with embedded spaces in go command with cgo in cmd/go
GO-2023-2095: Arbitrary code execution during build via line directives in cmd/go
GO-2023-2383: Command 'go get' may unexpectedly fallback to insecure git in cmd/go
GO-2024-2825: Arbitrary code execution during build on Darwin in cmd/go
GO-2024-2962: Output of "go env" does not sanitize values in cmd/go
GO-2025-3828: Unexpected command execution in untrusted VCS repositories in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Oct 17, 2019 GO-2021-0068 +15 more
GO-2021-0068: Arbitrary code injection via the go command with cgo on Windows in cmd/go
GO-2022-0475: Arbitrary code execution in go command with cgo in cmd/go and cmd/cgo
GO-2022-0476: Arbitrary code execution via the go command with cgo in cmd/go
GO-2023-1839: Code injection via go command with cgo in cmd/go
GO-2023-1841: Improper handling of non-optional LDFLAGS in go command with cgo in cmd/go
GO-2023-1842: Improper sanitization of LDFLAGS with embedded spaces in go command with cgo in cmd/go
GO-2023-2095: Arbitrary code execution during build via line directives in cmd/go
GO-2023-2383: Command 'go get' may unexpectedly fallback to insecure git in cmd/go
GO-2024-2825: Arbitrary code execution during build on Darwin in cmd/go
GO-2024-2962: Output of "go env" does not sanitize values in cmd/go
GO-2025-3828: Unexpected command execution in untrusted VCS repositories in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Sep 25, 2019 GO-2021-0068 +15 more
GO-2021-0068: Arbitrary code injection via the go command with cgo on Windows in cmd/go
GO-2022-0475: Arbitrary code execution in go command with cgo in cmd/go and cmd/cgo
GO-2022-0476: Arbitrary code execution via the go command with cgo in cmd/go
GO-2023-1839: Code injection via go command with cgo in cmd/go
GO-2023-1841: Improper handling of non-optional LDFLAGS in go command with cgo in cmd/go
GO-2023-1842: Improper sanitization of LDFLAGS with embedded spaces in go command with cgo in cmd/go
GO-2023-2095: Arbitrary code execution during build via line directives in cmd/go
GO-2023-2383: Command 'go get' may unexpectedly fallback to insecure git in cmd/go
GO-2024-2825: Arbitrary code execution during build on Darwin in cmd/go
GO-2024-2962: Output of "go env" does not sanitize values in cmd/go
GO-2025-3828: Unexpected command execution in untrusted VCS repositories in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Sep 3, 2019 GO-2021-0068 +15 more
GO-2021-0068: Arbitrary code injection via the go command with cgo on Windows in cmd/go
GO-2022-0475: Arbitrary code execution in go command with cgo in cmd/go and cmd/cgo
GO-2022-0476: Arbitrary code execution via the go command with cgo in cmd/go
GO-2023-1839: Code injection via go command with cgo in cmd/go
GO-2023-1841: Improper handling of non-optional LDFLAGS in go command with cgo in cmd/go
GO-2023-1842: Improper sanitization of LDFLAGS with embedded spaces in go command with cgo in cmd/go
GO-2023-2095: Arbitrary code execution during build via line directives in cmd/go
GO-2023-2383: Command 'go get' may unexpectedly fallback to insecure git in cmd/go
GO-2024-2825: Arbitrary code execution during build on Darwin in cmd/go
GO-2024-2962: Output of "go env" does not sanitize values in cmd/go
GO-2025-3828: Unexpected command execution in untrusted VCS repositories in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Aug 29, 2019 GO-2021-0068 +15 more
GO-2021-0068: Arbitrary code injection via the go command with cgo on Windows in cmd/go
GO-2022-0475: Arbitrary code execution in go command with cgo in cmd/go and cmd/cgo
GO-2022-0476: Arbitrary code execution via the go command with cgo in cmd/go
GO-2023-1839: Code injection via go command with cgo in cmd/go
GO-2023-1841: Improper handling of non-optional LDFLAGS in go command with cgo in cmd/go
GO-2023-1842: Improper sanitization of LDFLAGS with embedded spaces in go command with cgo in cmd/go
GO-2023-2095: Arbitrary code execution during build via line directives in cmd/go
GO-2023-2383: Command 'go get' may unexpectedly fallback to insecure git in cmd/go
GO-2024-2825: Arbitrary code execution during build on Darwin in cmd/go
GO-2024-2962: Output of "go env" does not sanitize values in cmd/go
GO-2025-3828: Unexpected command execution in untrusted VCS repositories in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Aug 21, 2019 GO-2021-0068 +15 more
GO-2021-0068: Arbitrary code injection via the go command with cgo on Windows in cmd/go
GO-2022-0475: Arbitrary code execution in go command with cgo in cmd/go and cmd/cgo
GO-2022-0476: Arbitrary code execution via the go command with cgo in cmd/go
GO-2023-1839: Code injection via go command with cgo in cmd/go
GO-2023-1841: Improper handling of non-optional LDFLAGS in go command with cgo in cmd/go
GO-2023-1842: Improper sanitization of LDFLAGS with embedded spaces in go command with cgo in cmd/go
GO-2023-2095: Arbitrary code execution during build via line directives in cmd/go
GO-2023-2383: Command 'go get' may unexpectedly fallback to insecure git in cmd/go
GO-2024-2825: Arbitrary code execution during build on Darwin in cmd/go
GO-2024-2962: Output of "go env" does not sanitize values in cmd/go
GO-2025-3828: Unexpected command execution in untrusted VCS repositories in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Jun 26, 2019 GO-2021-0068 +15 more
GO-2021-0068: Arbitrary code injection via the go command with cgo on Windows in cmd/go
GO-2022-0475: Arbitrary code execution in go command with cgo in cmd/go and cmd/cgo
GO-2022-0476: Arbitrary code execution via the go command with cgo in cmd/go
GO-2023-1839: Code injection via go command with cgo in cmd/go
GO-2023-1841: Improper handling of non-optional LDFLAGS in go command with cgo in cmd/go
GO-2023-1842: Improper sanitization of LDFLAGS with embedded spaces in go command with cgo in cmd/go
GO-2023-2095: Arbitrary code execution during build via line directives in cmd/go
GO-2023-2383: Command 'go get' may unexpectedly fallback to insecure git in cmd/go
GO-2024-2825: Arbitrary code execution during build on Darwin in cmd/go
GO-2024-2962: Output of "go env" does not sanitize values in cmd/go
GO-2025-3828: Unexpected command execution in untrusted VCS repositories in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Feb 12, 2020 GO-2021-0068 +15 more
GO-2021-0068: Arbitrary code injection via the go command with cgo on Windows in cmd/go
GO-2022-0475: Arbitrary code execution in go command with cgo in cmd/go and cmd/cgo
GO-2022-0476: Arbitrary code execution via the go command with cgo in cmd/go
GO-2023-1839: Code injection via go command with cgo in cmd/go
GO-2023-1841: Improper handling of non-optional LDFLAGS in go command with cgo in cmd/go
GO-2023-1842: Improper sanitization of LDFLAGS with embedded spaces in go command with cgo in cmd/go
GO-2023-2095: Arbitrary code execution during build via line directives in cmd/go
GO-2023-2383: Command 'go get' may unexpectedly fallback to insecure git in cmd/go
GO-2024-2825: Arbitrary code execution during build on Darwin in cmd/go
GO-2024-2962: Output of "go env" does not sanitize values in cmd/go
GO-2025-3828: Unexpected command execution in untrusted VCS repositories in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Jan 27, 2020 GO-2021-0068 +15 more
GO-2021-0068: Arbitrary code injection via the go command with cgo on Windows in cmd/go
GO-2022-0475: Arbitrary code execution in go command with cgo in cmd/go and cmd/cgo
GO-2022-0476: Arbitrary code execution via the go command with cgo in cmd/go
GO-2023-1839: Code injection via go command with cgo in cmd/go
GO-2023-1841: Improper handling of non-optional LDFLAGS in go command with cgo in cmd/go
GO-2023-1842: Improper sanitization of LDFLAGS with embedded spaces in go command with cgo in cmd/go
GO-2023-2095: Arbitrary code execution during build via line directives in cmd/go
GO-2023-2383: Command 'go get' may unexpectedly fallback to insecure git in cmd/go
GO-2024-2825: Arbitrary code execution during build on Darwin in cmd/go
GO-2024-2962: Output of "go env" does not sanitize values in cmd/go
GO-2025-3828: Unexpected command execution in untrusted VCS repositories in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Jan 9, 2020 GO-2021-0068 +15 more
GO-2021-0068: Arbitrary code injection via the go command with cgo on Windows in cmd/go
GO-2022-0475: Arbitrary code execution in go command with cgo in cmd/go and cmd/cgo
GO-2022-0476: Arbitrary code execution via the go command with cgo in cmd/go
GO-2023-1839: Code injection via go command with cgo in cmd/go
GO-2023-1841: Improper handling of non-optional LDFLAGS in go command with cgo in cmd/go
GO-2023-1842: Improper sanitization of LDFLAGS with embedded spaces in go command with cgo in cmd/go
GO-2023-2095: Arbitrary code execution during build via line directives in cmd/go
GO-2023-2383: Command 'go get' may unexpectedly fallback to insecure git in cmd/go
GO-2024-2825: Arbitrary code execution during build on Darwin in cmd/go
GO-2024-2962: Output of "go env" does not sanitize values in cmd/go
GO-2025-3828: Unexpected command execution in untrusted VCS repositories in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Dec 4, 2019 GO-2021-0068 +15 more
GO-2021-0068: Arbitrary code injection via the go command with cgo on Windows in cmd/go
GO-2022-0475: Arbitrary code execution in go command with cgo in cmd/go and cmd/cgo
GO-2022-0476: Arbitrary code execution via the go command with cgo in cmd/go
GO-2023-1839: Code injection via go command with cgo in cmd/go
GO-2023-1841: Improper handling of non-optional LDFLAGS in go command with cgo in cmd/go
GO-2023-1842: Improper sanitization of LDFLAGS with embedded spaces in go command with cgo in cmd/go
GO-2023-2095: Arbitrary code execution during build via line directives in cmd/go
GO-2023-2383: Command 'go get' may unexpectedly fallback to insecure git in cmd/go
GO-2024-2825: Arbitrary code execution during build on Darwin in cmd/go
GO-2024-2962: Output of "go env" does not sanitize values in cmd/go
GO-2025-3828: Unexpected command execution in untrusted VCS repositories in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Oct 31, 2019 GO-2021-0068 +15 more
GO-2021-0068: Arbitrary code injection via the go command with cgo on Windows in cmd/go
GO-2022-0475: Arbitrary code execution in go command with cgo in cmd/go and cmd/cgo
GO-2022-0476: Arbitrary code execution via the go command with cgo in cmd/go
GO-2023-1839: Code injection via go command with cgo in cmd/go
GO-2023-1841: Improper handling of non-optional LDFLAGS in go command with cgo in cmd/go
GO-2023-1842: Improper sanitization of LDFLAGS with embedded spaces in go command with cgo in cmd/go
GO-2023-2095: Arbitrary code execution during build via line directives in cmd/go
GO-2023-2383: Command 'go get' may unexpectedly fallback to insecure git in cmd/go
GO-2024-2825: Arbitrary code execution during build on Darwin in cmd/go
GO-2024-2962: Output of "go env" does not sanitize values in cmd/go
GO-2025-3828: Unexpected command execution in untrusted VCS repositories in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Oct 17, 2019 GO-2021-0068 +15 more
GO-2021-0068: Arbitrary code injection via the go command with cgo on Windows in cmd/go
GO-2022-0475: Arbitrary code execution in go command with cgo in cmd/go and cmd/cgo
GO-2022-0476: Arbitrary code execution via the go command with cgo in cmd/go
GO-2023-1839: Code injection via go command with cgo in cmd/go
GO-2023-1841: Improper handling of non-optional LDFLAGS in go command with cgo in cmd/go
GO-2023-1842: Improper sanitization of LDFLAGS with embedded spaces in go command with cgo in cmd/go
GO-2023-2095: Arbitrary code execution during build via line directives in cmd/go
GO-2023-2383: Command 'go get' may unexpectedly fallback to insecure git in cmd/go
GO-2024-2825: Arbitrary code execution during build on Darwin in cmd/go
GO-2024-2962: Output of "go env" does not sanitize values in cmd/go
GO-2025-3828: Unexpected command execution in untrusted VCS repositories in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Oct 17, 2019 GO-2021-0068 +15 more
GO-2021-0068: Arbitrary code injection via the go command with cgo on Windows in cmd/go
GO-2022-0475: Arbitrary code execution in go command with cgo in cmd/go and cmd/cgo
GO-2022-0476: Arbitrary code execution via the go command with cgo in cmd/go
GO-2023-1839: Code injection via go command with cgo in cmd/go
GO-2023-1841: Improper handling of non-optional LDFLAGS in go command with cgo in cmd/go
GO-2023-1842: Improper sanitization of LDFLAGS with embedded spaces in go command with cgo in cmd/go
GO-2023-2095: Arbitrary code execution during build via line directives in cmd/go
GO-2023-2383: Command 'go get' may unexpectedly fallback to insecure git in cmd/go
GO-2024-2825: Arbitrary code execution during build on Darwin in cmd/go
GO-2024-2962: Output of "go env" does not sanitize values in cmd/go
GO-2025-3828: Unexpected command execution in untrusted VCS repositories in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Sep 25, 2019 GO-2021-0068 +15 more
GO-2021-0068: Arbitrary code injection via the go command with cgo on Windows in cmd/go
GO-2022-0475: Arbitrary code execution in go command with cgo in cmd/go and cmd/cgo
GO-2022-0476: Arbitrary code execution via the go command with cgo in cmd/go
GO-2023-1839: Code injection via go command with cgo in cmd/go
GO-2023-1841: Improper handling of non-optional LDFLAGS in go command with cgo in cmd/go
GO-2023-1842: Improper sanitization of LDFLAGS with embedded spaces in go command with cgo in cmd/go
GO-2023-2095: Arbitrary code execution during build via line directives in cmd/go
GO-2023-2383: Command 'go get' may unexpectedly fallback to insecure git in cmd/go
GO-2024-2825: Arbitrary code execution during build on Darwin in cmd/go
GO-2024-2962: Output of "go env" does not sanitize values in cmd/go
GO-2025-3828: Unexpected command execution in untrusted VCS repositories in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Aug 15, 2019 GO-2021-0068 +15 more
GO-2021-0068: Arbitrary code injection via the go command with cgo on Windows in cmd/go
GO-2022-0475: Arbitrary code execution in go command with cgo in cmd/go and cmd/cgo
GO-2022-0476: Arbitrary code execution via the go command with cgo in cmd/go
GO-2023-1839: Code injection via go command with cgo in cmd/go
GO-2023-1841: Improper handling of non-optional LDFLAGS in go command with cgo in cmd/go
GO-2023-1842: Improper sanitization of LDFLAGS with embedded spaces in go command with cgo in cmd/go
GO-2023-2095: Arbitrary code execution during build via line directives in cmd/go
GO-2023-2383: Command 'go get' may unexpectedly fallback to insecure git in cmd/go
GO-2024-2825: Arbitrary code execution during build on Darwin in cmd/go
GO-2024-2962: Output of "go env" does not sanitize values in cmd/go
GO-2025-3828: Unexpected command execution in untrusted VCS repositories in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Aug 13, 2019 GO-2021-0068 +15 more
GO-2021-0068: Arbitrary code injection via the go command with cgo on Windows in cmd/go
GO-2022-0475: Arbitrary code execution in go command with cgo in cmd/go and cmd/cgo
GO-2022-0476: Arbitrary code execution via the go command with cgo in cmd/go
GO-2023-1839: Code injection via go command with cgo in cmd/go
GO-2023-1841: Improper handling of non-optional LDFLAGS in go command with cgo in cmd/go
GO-2023-1842: Improper sanitization of LDFLAGS with embedded spaces in go command with cgo in cmd/go
GO-2023-2095: Arbitrary code execution during build via line directives in cmd/go
GO-2023-2383: Command 'go get' may unexpectedly fallback to insecure git in cmd/go
GO-2024-2825: Arbitrary code execution during build on Darwin in cmd/go
GO-2024-2962: Output of "go env" does not sanitize values in cmd/go
GO-2025-3828: Unexpected command execution in untrusted VCS repositories in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Jul 8, 2019 GO-2021-0068 +15 more
GO-2021-0068: Arbitrary code injection via the go command with cgo on Windows in cmd/go
GO-2022-0475: Arbitrary code execution in go command with cgo in cmd/go and cmd/cgo
GO-2022-0476: Arbitrary code execution via the go command with cgo in cmd/go
GO-2023-1839: Code injection via go command with cgo in cmd/go
GO-2023-1841: Improper handling of non-optional LDFLAGS in go command with cgo in cmd/go
GO-2023-1842: Improper sanitization of LDFLAGS with embedded spaces in go command with cgo in cmd/go
GO-2023-2095: Arbitrary code execution during build via line directives in cmd/go
GO-2023-2383: Command 'go get' may unexpectedly fallback to insecure git in cmd/go
GO-2024-2825: Arbitrary code execution during build on Darwin in cmd/go
GO-2024-2962: Output of "go env" does not sanitize values in cmd/go
GO-2025-3828: Unexpected command execution in untrusted VCS repositories in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Jun 11, 2019 GO-2021-0068 +15 more
GO-2021-0068: Arbitrary code injection via the go command with cgo on Windows in cmd/go
GO-2022-0475: Arbitrary code execution in go command with cgo in cmd/go and cmd/cgo
GO-2022-0476: Arbitrary code execution via the go command with cgo in cmd/go
GO-2023-1839: Code injection via go command with cgo in cmd/go
GO-2023-1841: Improper handling of non-optional LDFLAGS in go command with cgo in cmd/go
GO-2023-1842: Improper sanitization of LDFLAGS with embedded spaces in go command with cgo in cmd/go
GO-2023-2095: Arbitrary code execution during build via line directives in cmd/go
GO-2023-2383: Command 'go get' may unexpectedly fallback to insecure git in cmd/go
GO-2024-2825: Arbitrary code execution during build on Darwin in cmd/go
GO-2024-2962: Output of "go env" does not sanitize values in cmd/go
GO-2025-3828: Unexpected command execution in untrusted VCS repositories in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
May 6, 2019 GO-2021-0068 +15 more
GO-2021-0068: Arbitrary code injection via the go command with cgo on Windows in cmd/go
GO-2022-0475: Arbitrary code execution in go command with cgo in cmd/go and cmd/cgo
GO-2022-0476: Arbitrary code execution via the go command with cgo in cmd/go
GO-2023-1839: Code injection via go command with cgo in cmd/go
GO-2023-1841: Improper handling of non-optional LDFLAGS in go command with cgo in cmd/go
GO-2023-1842: Improper sanitization of LDFLAGS with embedded spaces in go command with cgo in cmd/go
GO-2023-2095: Arbitrary code execution during build via line directives in cmd/go
GO-2023-2383: Command 'go get' may unexpectedly fallback to insecure git in cmd/go
GO-2024-2825: Arbitrary code execution during build on Darwin in cmd/go
GO-2024-2962: Output of "go env" does not sanitize values in cmd/go
GO-2025-3828: Unexpected command execution in untrusted VCS repositories in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Apr 11, 2019 GO-2021-0068 +15 more
GO-2021-0068: Arbitrary code injection via the go command with cgo on Windows in cmd/go
GO-2022-0475: Arbitrary code execution in go command with cgo in cmd/go and cmd/cgo
GO-2022-0476: Arbitrary code execution via the go command with cgo in cmd/go
GO-2023-1839: Code injection via go command with cgo in cmd/go
GO-2023-1841: Improper handling of non-optional LDFLAGS in go command with cgo in cmd/go
GO-2023-1842: Improper sanitization of LDFLAGS with embedded spaces in go command with cgo in cmd/go
GO-2023-2095: Arbitrary code execution during build via line directives in cmd/go
GO-2023-2383: Command 'go get' may unexpectedly fallback to insecure git in cmd/go
GO-2024-2825: Arbitrary code execution during build on Darwin in cmd/go
GO-2024-2962: Output of "go env" does not sanitize values in cmd/go
GO-2025-3828: Unexpected command execution in untrusted VCS repositories in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Apr 8, 2019 GO-2021-0068 +15 more
GO-2021-0068: Arbitrary code injection via the go command with cgo on Windows in cmd/go
GO-2022-0475: Arbitrary code execution in go command with cgo in cmd/go and cmd/cgo
GO-2022-0476: Arbitrary code execution via the go command with cgo in cmd/go
GO-2023-1839: Code injection via go command with cgo in cmd/go
GO-2023-1841: Improper handling of non-optional LDFLAGS in go command with cgo in cmd/go
GO-2023-1842: Improper sanitization of LDFLAGS with embedded spaces in go command with cgo in cmd/go
GO-2023-2095: Arbitrary code execution during build via line directives in cmd/go
GO-2023-2383: Command 'go get' may unexpectedly fallback to insecure git in cmd/go
GO-2024-2825: Arbitrary code execution during build on Darwin in cmd/go
GO-2024-2962: Output of "go env" does not sanitize values in cmd/go
GO-2025-3828: Unexpected command execution in untrusted VCS repositories in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Apr 5, 2019 GO-2021-0068 +15 more
GO-2021-0068: Arbitrary code injection via the go command with cgo on Windows in cmd/go
GO-2022-0475: Arbitrary code execution in go command with cgo in cmd/go and cmd/cgo
GO-2022-0476: Arbitrary code execution via the go command with cgo in cmd/go
GO-2023-1839: Code injection via go command with cgo in cmd/go
GO-2023-1841: Improper handling of non-optional LDFLAGS in go command with cgo in cmd/go
GO-2023-1842: Improper sanitization of LDFLAGS with embedded spaces in go command with cgo in cmd/go
GO-2023-2095: Arbitrary code execution during build via line directives in cmd/go
GO-2023-2383: Command 'go get' may unexpectedly fallback to insecure git in cmd/go
GO-2024-2825: Arbitrary code execution during build on Darwin in cmd/go
GO-2024-2962: Output of "go env" does not sanitize values in cmd/go
GO-2025-3828: Unexpected command execution in untrusted VCS repositories in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Mar 14, 2019 GO-2021-0068 +15 more
GO-2021-0068: Arbitrary code injection via the go command with cgo on Windows in cmd/go
GO-2022-0475: Arbitrary code execution in go command with cgo in cmd/go and cmd/cgo
GO-2022-0476: Arbitrary code execution via the go command with cgo in cmd/go
GO-2023-1839: Code injection via go command with cgo in cmd/go
GO-2023-1841: Improper handling of non-optional LDFLAGS in go command with cgo in cmd/go
GO-2023-1842: Improper sanitization of LDFLAGS with embedded spaces in go command with cgo in cmd/go
GO-2023-2095: Arbitrary code execution during build via line directives in cmd/go
GO-2023-2383: Command 'go get' may unexpectedly fallback to insecure git in cmd/go
GO-2024-2825: Arbitrary code execution during build on Darwin in cmd/go
GO-2024-2962: Output of "go env" does not sanitize values in cmd/go
GO-2025-3828: Unexpected command execution in untrusted VCS repositories in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Feb 25, 2019 GO-2021-0068 +15 more
GO-2021-0068: Arbitrary code injection via the go command with cgo on Windows in cmd/go
GO-2022-0475: Arbitrary code execution in go command with cgo in cmd/go and cmd/cgo
GO-2022-0476: Arbitrary code execution via the go command with cgo in cmd/go
GO-2023-1839: Code injection via go command with cgo in cmd/go
GO-2023-1841: Improper handling of non-optional LDFLAGS in go command with cgo in cmd/go
GO-2023-1842: Improper sanitization of LDFLAGS with embedded spaces in go command with cgo in cmd/go
GO-2023-2095: Arbitrary code execution during build via line directives in cmd/go
GO-2023-2383: Command 'go get' may unexpectedly fallback to insecure git in cmd/go
GO-2024-2825: Arbitrary code execution during build on Darwin in cmd/go
GO-2024-2962: Output of "go env" does not sanitize values in cmd/go
GO-2025-3828: Unexpected command execution in untrusted VCS repositories in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Feb 11, 2019 GO-2021-0068 +15 more
GO-2021-0068: Arbitrary code injection via the go command with cgo on Windows in cmd/go
GO-2022-0475: Arbitrary code execution in go command with cgo in cmd/go and cmd/cgo
GO-2022-0476: Arbitrary code execution via the go command with cgo in cmd/go
GO-2023-1839: Code injection via go command with cgo in cmd/go
GO-2023-1841: Improper handling of non-optional LDFLAGS in go command with cgo in cmd/go
GO-2023-1842: Improper sanitization of LDFLAGS with embedded spaces in go command with cgo in cmd/go
GO-2023-2095: Arbitrary code execution during build via line directives in cmd/go
GO-2023-2383: Command 'go get' may unexpectedly fallback to insecure git in cmd/go
GO-2024-2825: Arbitrary code execution during build on Darwin in cmd/go
GO-2024-2962: Output of "go env" does not sanitize values in cmd/go
GO-2025-3828: Unexpected command execution in untrusted VCS repositories in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Jan 10, 2019 GO-2021-0068 +15 more
GO-2021-0068: Arbitrary code injection via the go command with cgo on Windows in cmd/go
GO-2022-0475: Arbitrary code execution in go command with cgo in cmd/go and cmd/cgo
GO-2022-0476: Arbitrary code execution via the go command with cgo in cmd/go
GO-2023-1839: Code injection via go command with cgo in cmd/go
GO-2023-1841: Improper handling of non-optional LDFLAGS in go command with cgo in cmd/go
GO-2023-1842: Improper sanitization of LDFLAGS with embedded spaces in go command with cgo in cmd/go
GO-2023-2095: Arbitrary code execution during build via line directives in cmd/go
GO-2023-2383: Command 'go get' may unexpectedly fallback to insecure git in cmd/go
GO-2024-2825: Arbitrary code execution during build on Darwin in cmd/go
GO-2024-2962: Output of "go env" does not sanitize values in cmd/go
GO-2025-3828: Unexpected command execution in untrusted VCS repositories in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Dec 18, 2018 GO-2021-0068 +15 more
GO-2021-0068: Arbitrary code injection via the go command with cgo on Windows in cmd/go
GO-2022-0475: Arbitrary code execution in go command with cgo in cmd/go and cmd/cgo
GO-2022-0476: Arbitrary code execution via the go command with cgo in cmd/go
GO-2023-1839: Code injection via go command with cgo in cmd/go
GO-2023-1841: Improper handling of non-optional LDFLAGS in go command with cgo in cmd/go
GO-2023-1842: Improper sanitization of LDFLAGS with embedded spaces in go command with cgo in cmd/go
GO-2023-2095: Arbitrary code execution during build via line directives in cmd/go
GO-2023-2383: Command 'go get' may unexpectedly fallback to insecure git in cmd/go
GO-2024-2825: Arbitrary code execution during build on Darwin in cmd/go
GO-2024-2962: Output of "go env" does not sanitize values in cmd/go
GO-2025-3828: Unexpected command execution in untrusted VCS repositories in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Aug 13, 2019 GO-2021-0068 +15 more
GO-2021-0068: Arbitrary code injection via the go command with cgo on Windows in cmd/go
GO-2022-0475: Arbitrary code execution in go command with cgo in cmd/go and cmd/cgo
GO-2022-0476: Arbitrary code execution via the go command with cgo in cmd/go
GO-2023-1839: Code injection via go command with cgo in cmd/go
GO-2023-1841: Improper handling of non-optional LDFLAGS in go command with cgo in cmd/go
GO-2023-1842: Improper sanitization of LDFLAGS with embedded spaces in go command with cgo in cmd/go
GO-2023-2095: Arbitrary code execution during build via line directives in cmd/go
GO-2023-2383: Command 'go get' may unexpectedly fallback to insecure git in cmd/go
GO-2024-2825: Arbitrary code execution during build on Darwin in cmd/go
GO-2024-2962: Output of "go env" does not sanitize values in cmd/go
GO-2025-3828: Unexpected command execution in untrusted VCS repositories in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Jul 8, 2019 GO-2021-0068 +15 more
GO-2021-0068: Arbitrary code injection via the go command with cgo on Windows in cmd/go
GO-2022-0475: Arbitrary code execution in go command with cgo in cmd/go and cmd/cgo
GO-2022-0476: Arbitrary code execution via the go command with cgo in cmd/go
GO-2023-1839: Code injection via go command with cgo in cmd/go
GO-2023-1841: Improper handling of non-optional LDFLAGS in go command with cgo in cmd/go
GO-2023-1842: Improper sanitization of LDFLAGS with embedded spaces in go command with cgo in cmd/go
GO-2023-2095: Arbitrary code execution during build via line directives in cmd/go
GO-2023-2383: Command 'go get' may unexpectedly fallback to insecure git in cmd/go
GO-2024-2825: Arbitrary code execution during build on Darwin in cmd/go
GO-2024-2962: Output of "go env" does not sanitize values in cmd/go
GO-2025-3828: Unexpected command execution in untrusted VCS repositories in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Jun 11, 2019 GO-2021-0068 +15 more
GO-2021-0068: Arbitrary code injection via the go command with cgo on Windows in cmd/go
GO-2022-0475: Arbitrary code execution in go command with cgo in cmd/go and cmd/cgo
GO-2022-0476: Arbitrary code execution via the go command with cgo in cmd/go
GO-2023-1839: Code injection via go command with cgo in cmd/go
GO-2023-1841: Improper handling of non-optional LDFLAGS in go command with cgo in cmd/go
GO-2023-1842: Improper sanitization of LDFLAGS with embedded spaces in go command with cgo in cmd/go
GO-2023-2095: Arbitrary code execution during build via line directives in cmd/go
GO-2023-2383: Command 'go get' may unexpectedly fallback to insecure git in cmd/go
GO-2024-2825: Arbitrary code execution during build on Darwin in cmd/go
GO-2024-2962: Output of "go env" does not sanitize values in cmd/go
GO-2025-3828: Unexpected command execution in untrusted VCS repositories in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
May 6, 2019 GO-2021-0068 +15 more
GO-2021-0068: Arbitrary code injection via the go command with cgo on Windows in cmd/go
GO-2022-0475: Arbitrary code execution in go command with cgo in cmd/go and cmd/cgo
GO-2022-0476: Arbitrary code execution via the go command with cgo in cmd/go
GO-2023-1839: Code injection via go command with cgo in cmd/go
GO-2023-1841: Improper handling of non-optional LDFLAGS in go command with cgo in cmd/go
GO-2023-1842: Improper sanitization of LDFLAGS with embedded spaces in go command with cgo in cmd/go
GO-2023-2095: Arbitrary code execution during build via line directives in cmd/go
GO-2023-2383: Command 'go get' may unexpectedly fallback to insecure git in cmd/go
GO-2024-2825: Arbitrary code execution during build on Darwin in cmd/go
GO-2024-2962: Output of "go env" does not sanitize values in cmd/go
GO-2025-3828: Unexpected command execution in untrusted VCS repositories in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Apr 11, 2019 GO-2021-0068 +15 more
GO-2021-0068: Arbitrary code injection via the go command with cgo on Windows in cmd/go
GO-2022-0475: Arbitrary code execution in go command with cgo in cmd/go and cmd/cgo
GO-2022-0476: Arbitrary code execution via the go command with cgo in cmd/go
GO-2023-1839: Code injection via go command with cgo in cmd/go
GO-2023-1841: Improper handling of non-optional LDFLAGS in go command with cgo in cmd/go
GO-2023-1842: Improper sanitization of LDFLAGS with embedded spaces in go command with cgo in cmd/go
GO-2023-2095: Arbitrary code execution during build via line directives in cmd/go
GO-2023-2383: Command 'go get' may unexpectedly fallback to insecure git in cmd/go
GO-2024-2825: Arbitrary code execution during build on Darwin in cmd/go
GO-2024-2962: Output of "go env" does not sanitize values in cmd/go
GO-2025-3828: Unexpected command execution in untrusted VCS repositories in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Apr 8, 2019 GO-2021-0068 +15 more
GO-2021-0068: Arbitrary code injection via the go command with cgo on Windows in cmd/go
GO-2022-0475: Arbitrary code execution in go command with cgo in cmd/go and cmd/cgo
GO-2022-0476: Arbitrary code execution via the go command with cgo in cmd/go
GO-2023-1839: Code injection via go command with cgo in cmd/go
GO-2023-1841: Improper handling of non-optional LDFLAGS in go command with cgo in cmd/go
GO-2023-1842: Improper sanitization of LDFLAGS with embedded spaces in go command with cgo in cmd/go
GO-2023-2095: Arbitrary code execution during build via line directives in cmd/go
GO-2023-2383: Command 'go get' may unexpectedly fallback to insecure git in cmd/go
GO-2024-2825: Arbitrary code execution during build on Darwin in cmd/go
GO-2024-2962: Output of "go env" does not sanitize values in cmd/go
GO-2025-3828: Unexpected command execution in untrusted VCS repositories in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Apr 5, 2019 GO-2021-0068 +15 more
GO-2021-0068: Arbitrary code injection via the go command with cgo on Windows in cmd/go
GO-2022-0475: Arbitrary code execution in go command with cgo in cmd/go and cmd/cgo
GO-2022-0476: Arbitrary code execution via the go command with cgo in cmd/go
GO-2023-1839: Code injection via go command with cgo in cmd/go
GO-2023-1841: Improper handling of non-optional LDFLAGS in go command with cgo in cmd/go
GO-2023-1842: Improper sanitization of LDFLAGS with embedded spaces in go command with cgo in cmd/go
GO-2023-2095: Arbitrary code execution during build via line directives in cmd/go
GO-2023-2383: Command 'go get' may unexpectedly fallback to insecure git in cmd/go
GO-2024-2825: Arbitrary code execution during build on Darwin in cmd/go
GO-2024-2962: Output of "go env" does not sanitize values in cmd/go
GO-2025-3828: Unexpected command execution in untrusted VCS repositories in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Mar 14, 2019 GO-2021-0068 +15 more
GO-2021-0068: Arbitrary code injection via the go command with cgo on Windows in cmd/go
GO-2022-0475: Arbitrary code execution in go command with cgo in cmd/go and cmd/cgo
GO-2022-0476: Arbitrary code execution via the go command with cgo in cmd/go
GO-2023-1839: Code injection via go command with cgo in cmd/go
GO-2023-1841: Improper handling of non-optional LDFLAGS in go command with cgo in cmd/go
GO-2023-1842: Improper sanitization of LDFLAGS with embedded spaces in go command with cgo in cmd/go
GO-2023-2095: Arbitrary code execution during build via line directives in cmd/go
GO-2023-2383: Command 'go get' may unexpectedly fallback to insecure git in cmd/go
GO-2024-2825: Arbitrary code execution during build on Darwin in cmd/go
GO-2024-2962: Output of "go env" does not sanitize values in cmd/go
GO-2025-3828: Unexpected command execution in untrusted VCS repositories in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Jan 23, 2019 GO-2021-0068 +15 more
GO-2021-0068: Arbitrary code injection via the go command with cgo on Windows in cmd/go
GO-2022-0475: Arbitrary code execution in go command with cgo in cmd/go and cmd/cgo
GO-2022-0476: Arbitrary code execution via the go command with cgo in cmd/go
GO-2023-1839: Code injection via go command with cgo in cmd/go
GO-2023-1841: Improper handling of non-optional LDFLAGS in go command with cgo in cmd/go
GO-2023-1842: Improper sanitization of LDFLAGS with embedded spaces in go command with cgo in cmd/go
GO-2023-2095: Arbitrary code execution during build via line directives in cmd/go
GO-2023-2383: Command 'go get' may unexpectedly fallback to insecure git in cmd/go
GO-2024-2825: Arbitrary code execution during build on Darwin in cmd/go
GO-2024-2962: Output of "go env" does not sanitize values in cmd/go
GO-2025-3828: Unexpected command execution in untrusted VCS repositories in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Dec 14, 2018 GO-2021-0068 +15 more
GO-2021-0068: Arbitrary code injection via the go command with cgo on Windows in cmd/go
GO-2022-0475: Arbitrary code execution in go command with cgo in cmd/go and cmd/cgo
GO-2022-0476: Arbitrary code execution via the go command with cgo in cmd/go
GO-2023-1839: Code injection via go command with cgo in cmd/go
GO-2023-1841: Improper handling of non-optional LDFLAGS in go command with cgo in cmd/go
GO-2023-1842: Improper sanitization of LDFLAGS with embedded spaces in go command with cgo in cmd/go
GO-2023-2095: Arbitrary code execution during build via line directives in cmd/go
GO-2023-2383: Command 'go get' may unexpectedly fallback to insecure git in cmd/go
GO-2024-2825: Arbitrary code execution during build on Darwin in cmd/go
GO-2024-2962: Output of "go env" does not sanitize values in cmd/go
GO-2025-3828: Unexpected command execution in untrusted VCS repositories in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Dec 13, 2018 GO-2021-0068 +15 more
GO-2021-0068: Arbitrary code injection via the go command with cgo on Windows in cmd/go
GO-2022-0475: Arbitrary code execution in go command with cgo in cmd/go and cmd/cgo
GO-2022-0476: Arbitrary code execution via the go command with cgo in cmd/go
GO-2023-1839: Code injection via go command with cgo in cmd/go
GO-2023-1841: Improper handling of non-optional LDFLAGS in go command with cgo in cmd/go
GO-2023-1842: Improper sanitization of LDFLAGS with embedded spaces in go command with cgo in cmd/go
GO-2023-2095: Arbitrary code execution during build via line directives in cmd/go
GO-2023-2383: Command 'go get' may unexpectedly fallback to insecure git in cmd/go
GO-2024-2825: Arbitrary code execution during build on Darwin in cmd/go
GO-2024-2962: Output of "go env" does not sanitize values in cmd/go
GO-2025-3828: Unexpected command execution in untrusted VCS repositories in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Nov 2, 2018 GO-2021-0068 +15 more
GO-2021-0068: Arbitrary code injection via the go command with cgo on Windows in cmd/go
GO-2022-0475: Arbitrary code execution in go command with cgo in cmd/go and cmd/cgo
GO-2022-0476: Arbitrary code execution via the go command with cgo in cmd/go
GO-2023-1839: Code injection via go command with cgo in cmd/go
GO-2023-1841: Improper handling of non-optional LDFLAGS in go command with cgo in cmd/go
GO-2023-1842: Improper sanitization of LDFLAGS with embedded spaces in go command with cgo in cmd/go
GO-2023-2095: Arbitrary code execution during build via line directives in cmd/go
GO-2023-2383: Command 'go get' may unexpectedly fallback to insecure git in cmd/go
GO-2024-2825: Arbitrary code execution during build on Darwin in cmd/go
GO-2024-2962: Output of "go env" does not sanitize values in cmd/go
GO-2025-3828: Unexpected command execution in untrusted VCS repositories in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Oct 1, 2018 GO-2021-0068 +15 more
GO-2021-0068: Arbitrary code injection via the go command with cgo on Windows in cmd/go
GO-2022-0475: Arbitrary code execution in go command with cgo in cmd/go and cmd/cgo
GO-2022-0476: Arbitrary code execution via the go command with cgo in cmd/go
GO-2023-1839: Code injection via go command with cgo in cmd/go
GO-2023-1841: Improper handling of non-optional LDFLAGS in go command with cgo in cmd/go
GO-2023-1842: Improper sanitization of LDFLAGS with embedded spaces in go command with cgo in cmd/go
GO-2023-2095: Arbitrary code execution during build via line directives in cmd/go
GO-2023-2383: Command 'go get' may unexpectedly fallback to insecure git in cmd/go
GO-2024-2825: Arbitrary code execution during build on Darwin in cmd/go
GO-2024-2962: Output of "go env" does not sanitize values in cmd/go
GO-2025-3828: Unexpected command execution in untrusted VCS repositories in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Aug 24, 2018 GO-2021-0068 +15 more
GO-2021-0068: Arbitrary code injection via the go command with cgo on Windows in cmd/go
GO-2022-0475: Arbitrary code execution in go command with cgo in cmd/go and cmd/cgo
GO-2022-0476: Arbitrary code execution via the go command with cgo in cmd/go
GO-2023-1839: Code injection via go command with cgo in cmd/go
GO-2023-1841: Improper handling of non-optional LDFLAGS in go command with cgo in cmd/go
GO-2023-1842: Improper sanitization of LDFLAGS with embedded spaces in go command with cgo in cmd/go
GO-2023-2095: Arbitrary code execution during build via line directives in cmd/go
GO-2023-2383: Command 'go get' may unexpectedly fallback to insecure git in cmd/go
GO-2024-2825: Arbitrary code execution during build on Darwin in cmd/go
GO-2024-2962: Output of "go env" does not sanitize values in cmd/go
GO-2025-3828: Unexpected command execution in untrusted VCS repositories in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Aug 22, 2018 GO-2021-0068 +15 more
GO-2021-0068: Arbitrary code injection via the go command with cgo on Windows in cmd/go
GO-2022-0475: Arbitrary code execution in go command with cgo in cmd/go and cmd/cgo
GO-2022-0476: Arbitrary code execution via the go command with cgo in cmd/go
GO-2023-1839: Code injection via go command with cgo in cmd/go
GO-2023-1841: Improper handling of non-optional LDFLAGS in go command with cgo in cmd/go
GO-2023-1842: Improper sanitization of LDFLAGS with embedded spaces in go command with cgo in cmd/go
GO-2023-2095: Arbitrary code execution during build via line directives in cmd/go
GO-2023-2383: Command 'go get' may unexpectedly fallback to insecure git in cmd/go
GO-2024-2825: Arbitrary code execution during build on Darwin in cmd/go
GO-2024-2962: Output of "go env" does not sanitize values in cmd/go
GO-2025-3828: Unexpected command execution in untrusted VCS repositories in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Aug 13, 2018 GO-2021-0068 +15 more
GO-2021-0068: Arbitrary code injection via the go command with cgo on Windows in cmd/go
GO-2022-0475: Arbitrary code execution in go command with cgo in cmd/go and cmd/cgo
GO-2022-0476: Arbitrary code execution via the go command with cgo in cmd/go
GO-2023-1839: Code injection via go command with cgo in cmd/go
GO-2023-1841: Improper handling of non-optional LDFLAGS in go command with cgo in cmd/go
GO-2023-1842: Improper sanitization of LDFLAGS with embedded spaces in go command with cgo in cmd/go
GO-2023-2095: Arbitrary code execution during build via line directives in cmd/go
GO-2023-2383: Command 'go get' may unexpectedly fallback to insecure git in cmd/go
GO-2024-2825: Arbitrary code execution during build on Darwin in cmd/go
GO-2024-2962: Output of "go env" does not sanitize values in cmd/go
GO-2025-3828: Unexpected command execution in untrusted VCS repositories in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Aug 3, 2018 GO-2021-0068 +15 more
GO-2021-0068: Arbitrary code injection via the go command with cgo on Windows in cmd/go
GO-2022-0475: Arbitrary code execution in go command with cgo in cmd/go and cmd/cgo
GO-2022-0476: Arbitrary code execution via the go command with cgo in cmd/go
GO-2023-1839: Code injection via go command with cgo in cmd/go
GO-2023-1841: Improper handling of non-optional LDFLAGS in go command with cgo in cmd/go
GO-2023-1842: Improper sanitization of LDFLAGS with embedded spaces in go command with cgo in cmd/go
GO-2023-2095: Arbitrary code execution during build via line directives in cmd/go
GO-2023-2383: Command 'go get' may unexpectedly fallback to insecure git in cmd/go
GO-2024-2825: Arbitrary code execution during build on Darwin in cmd/go
GO-2024-2962: Output of "go env" does not sanitize values in cmd/go
GO-2025-3828: Unexpected command execution in untrusted VCS repositories in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Jul 19, 2018 GO-2021-0068 +15 more
GO-2021-0068: Arbitrary code injection via the go command with cgo on Windows in cmd/go
GO-2022-0475: Arbitrary code execution in go command with cgo in cmd/go and cmd/cgo
GO-2022-0476: Arbitrary code execution via the go command with cgo in cmd/go
GO-2023-1839: Code injection via go command with cgo in cmd/go
GO-2023-1841: Improper handling of non-optional LDFLAGS in go command with cgo in cmd/go
GO-2023-1842: Improper sanitization of LDFLAGS with embedded spaces in go command with cgo in cmd/go
GO-2023-2095: Arbitrary code execution during build via line directives in cmd/go
GO-2023-2383: Command 'go get' may unexpectedly fallback to insecure git in cmd/go
GO-2024-2825: Arbitrary code execution during build on Darwin in cmd/go
GO-2024-2962: Output of "go env" does not sanitize values in cmd/go
GO-2025-3828: Unexpected command execution in untrusted VCS repositories in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Jun 26, 2018 GO-2021-0068 +15 more
GO-2021-0068: Arbitrary code injection via the go command with cgo on Windows in cmd/go
GO-2022-0475: Arbitrary code execution in go command with cgo in cmd/go and cmd/cgo
GO-2022-0476: Arbitrary code execution via the go command with cgo in cmd/go
GO-2023-1839: Code injection via go command with cgo in cmd/go
GO-2023-1841: Improper handling of non-optional LDFLAGS in go command with cgo in cmd/go
GO-2023-1842: Improper sanitization of LDFLAGS with embedded spaces in go command with cgo in cmd/go
GO-2023-2095: Arbitrary code execution during build via line directives in cmd/go
GO-2023-2383: Command 'go get' may unexpectedly fallback to insecure git in cmd/go
GO-2024-2825: Arbitrary code execution during build on Darwin in cmd/go
GO-2024-2962: Output of "go env" does not sanitize values in cmd/go
GO-2025-3828: Unexpected command execution in untrusted VCS repositories in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Jan 23, 2019 GO-2021-0068 +15 more
GO-2021-0068: Arbitrary code injection via the go command with cgo on Windows in cmd/go
GO-2022-0475: Arbitrary code execution in go command with cgo in cmd/go and cmd/cgo
GO-2022-0476: Arbitrary code execution via the go command with cgo in cmd/go
GO-2023-1839: Code injection via go command with cgo in cmd/go
GO-2023-1841: Improper handling of non-optional LDFLAGS in go command with cgo in cmd/go
GO-2023-1842: Improper sanitization of LDFLAGS with embedded spaces in go command with cgo in cmd/go
GO-2023-2095: Arbitrary code execution during build via line directives in cmd/go
GO-2023-2383: Command 'go get' may unexpectedly fallback to insecure git in cmd/go
GO-2024-2825: Arbitrary code execution during build on Darwin in cmd/go
GO-2024-2962: Output of "go env" does not sanitize values in cmd/go
GO-2025-3828: Unexpected command execution in untrusted VCS repositories in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Dec 14, 2018 GO-2021-0068 +15 more
GO-2021-0068: Arbitrary code injection via the go command with cgo on Windows in cmd/go
GO-2022-0475: Arbitrary code execution in go command with cgo in cmd/go and cmd/cgo
GO-2022-0476: Arbitrary code execution via the go command with cgo in cmd/go
GO-2023-1839: Code injection via go command with cgo in cmd/go
GO-2023-1841: Improper handling of non-optional LDFLAGS in go command with cgo in cmd/go
GO-2023-1842: Improper sanitization of LDFLAGS with embedded spaces in go command with cgo in cmd/go
GO-2023-2095: Arbitrary code execution during build via line directives in cmd/go
GO-2023-2383: Command 'go get' may unexpectedly fallback to insecure git in cmd/go
GO-2024-2825: Arbitrary code execution during build on Darwin in cmd/go
GO-2024-2962: Output of "go env" does not sanitize values in cmd/go
GO-2025-3828: Unexpected command execution in untrusted VCS repositories in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Dec 13, 2018 GO-2021-0068 +15 more
GO-2021-0068: Arbitrary code injection via the go command with cgo on Windows in cmd/go
GO-2022-0475: Arbitrary code execution in go command with cgo in cmd/go and cmd/cgo
GO-2022-0476: Arbitrary code execution via the go command with cgo in cmd/go
GO-2023-1839: Code injection via go command with cgo in cmd/go
GO-2023-1841: Improper handling of non-optional LDFLAGS in go command with cgo in cmd/go
GO-2023-1842: Improper sanitization of LDFLAGS with embedded spaces in go command with cgo in cmd/go
GO-2023-2095: Arbitrary code execution during build via line directives in cmd/go
GO-2023-2383: Command 'go get' may unexpectedly fallback to insecure git in cmd/go
GO-2024-2825: Arbitrary code execution during build on Darwin in cmd/go
GO-2024-2962: Output of "go env" does not sanitize values in cmd/go
GO-2025-3828: Unexpected command execution in untrusted VCS repositories in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Nov 2, 2018 GO-2021-0068 +15 more
GO-2021-0068: Arbitrary code injection via the go command with cgo on Windows in cmd/go
GO-2022-0475: Arbitrary code execution in go command with cgo in cmd/go and cmd/cgo
GO-2022-0476: Arbitrary code execution via the go command with cgo in cmd/go
GO-2023-1839: Code injection via go command with cgo in cmd/go
GO-2023-1841: Improper handling of non-optional LDFLAGS in go command with cgo in cmd/go
GO-2023-1842: Improper sanitization of LDFLAGS with embedded spaces in go command with cgo in cmd/go
GO-2023-2095: Arbitrary code execution during build via line directives in cmd/go
GO-2023-2383: Command 'go get' may unexpectedly fallback to insecure git in cmd/go
GO-2024-2825: Arbitrary code execution during build on Darwin in cmd/go
GO-2024-2962: Output of "go env" does not sanitize values in cmd/go
GO-2025-3828: Unexpected command execution in untrusted VCS repositories in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Aug 24, 2018 GO-2021-0068 +15 more
GO-2021-0068: Arbitrary code injection via the go command with cgo on Windows in cmd/go
GO-2022-0475: Arbitrary code execution in go command with cgo in cmd/go and cmd/cgo
GO-2022-0476: Arbitrary code execution via the go command with cgo in cmd/go
GO-2023-1839: Code injection via go command with cgo in cmd/go
GO-2023-1841: Improper handling of non-optional LDFLAGS in go command with cgo in cmd/go
GO-2023-1842: Improper sanitization of LDFLAGS with embedded spaces in go command with cgo in cmd/go
GO-2023-2095: Arbitrary code execution during build via line directives in cmd/go
GO-2023-2383: Command 'go get' may unexpectedly fallback to insecure git in cmd/go
GO-2024-2825: Arbitrary code execution during build on Darwin in cmd/go
GO-2024-2962: Output of "go env" does not sanitize values in cmd/go
GO-2025-3828: Unexpected command execution in untrusted VCS repositories in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Jun 6, 2018 GO-2021-0068 +15 more
GO-2021-0068: Arbitrary code injection via the go command with cgo on Windows in cmd/go
GO-2022-0475: Arbitrary code execution in go command with cgo in cmd/go and cmd/cgo
GO-2022-0476: Arbitrary code execution via the go command with cgo in cmd/go
GO-2023-1839: Code injection via go command with cgo in cmd/go
GO-2023-1841: Improper handling of non-optional LDFLAGS in go command with cgo in cmd/go
GO-2023-1842: Improper sanitization of LDFLAGS with embedded spaces in go command with cgo in cmd/go
GO-2023-2095: Arbitrary code execution during build via line directives in cmd/go
GO-2023-2383: Command 'go get' may unexpectedly fallback to insecure git in cmd/go
GO-2024-2825: Arbitrary code execution during build on Darwin in cmd/go
GO-2024-2962: Output of "go env" does not sanitize values in cmd/go
GO-2025-3828: Unexpected command execution in untrusted VCS repositories in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Apr 30, 2018 GO-2021-0068 +15 more
GO-2021-0068: Arbitrary code injection via the go command with cgo on Windows in cmd/go
GO-2022-0475: Arbitrary code execution in go command with cgo in cmd/go and cmd/cgo
GO-2022-0476: Arbitrary code execution via the go command with cgo in cmd/go
GO-2023-1839: Code injection via go command with cgo in cmd/go
GO-2023-1841: Improper handling of non-optional LDFLAGS in go command with cgo in cmd/go
GO-2023-1842: Improper sanitization of LDFLAGS with embedded spaces in go command with cgo in cmd/go
GO-2023-2095: Arbitrary code execution during build via line directives in cmd/go
GO-2023-2383: Command 'go get' may unexpectedly fallback to insecure git in cmd/go
GO-2024-2825: Arbitrary code execution during build on Darwin in cmd/go
GO-2024-2962: Output of "go env" does not sanitize values in cmd/go
GO-2025-3828: Unexpected command execution in untrusted VCS repositories in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Mar 29, 2018 GO-2021-0068 +15 more
GO-2021-0068: Arbitrary code injection via the go command with cgo on Windows in cmd/go
GO-2022-0475: Arbitrary code execution in go command with cgo in cmd/go and cmd/cgo
GO-2022-0476: Arbitrary code execution via the go command with cgo in cmd/go
GO-2023-1839: Code injection via go command with cgo in cmd/go
GO-2023-1841: Improper handling of non-optional LDFLAGS in go command with cgo in cmd/go
GO-2023-1842: Improper sanitization of LDFLAGS with embedded spaces in go command with cgo in cmd/go
GO-2023-2095: Arbitrary code execution during build via line directives in cmd/go
GO-2023-2383: Command 'go get' may unexpectedly fallback to insecure git in cmd/go
GO-2024-2825: Arbitrary code execution during build on Darwin in cmd/go
GO-2024-2962: Output of "go env" does not sanitize values in cmd/go
GO-2025-3828: Unexpected command execution in untrusted VCS repositories in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Feb 16, 2018 GO-2021-0068 +16 more
GO-2021-0068: Arbitrary code injection via the go command with cgo on Windows in cmd/go
GO-2022-0203: Remote command execution via "go get" command with "-insecure" option in cmd/go
GO-2022-0475: Arbitrary code execution in go command with cgo in cmd/go and cmd/cgo
GO-2022-0476: Arbitrary code execution via the go command with cgo in cmd/go
GO-2023-1839: Code injection via go command with cgo in cmd/go
GO-2023-1841: Improper handling of non-optional LDFLAGS in go command with cgo in cmd/go
GO-2023-1842: Improper sanitization of LDFLAGS with embedded spaces in go command with cgo in cmd/go
GO-2023-2095: Arbitrary code execution during build via line directives in cmd/go
GO-2023-2383: Command 'go get' may unexpectedly fallback to insecure git in cmd/go
GO-2024-2825: Arbitrary code execution during build on Darwin in cmd/go
GO-2024-2962: Output of "go env" does not sanitize values in cmd/go
GO-2025-3828: Unexpected command execution in untrusted VCS repositories in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Feb 7, 2018 GO-2021-0068 +16 more
GO-2021-0068: Arbitrary code injection via the go command with cgo on Windows in cmd/go
GO-2022-0203: Remote command execution via "go get" command with "-insecure" option in cmd/go
GO-2022-0475: Arbitrary code execution in go command with cgo in cmd/go and cmd/cgo
GO-2022-0476: Arbitrary code execution via the go command with cgo in cmd/go
GO-2023-1839: Code injection via go command with cgo in cmd/go
GO-2023-1841: Improper handling of non-optional LDFLAGS in go command with cgo in cmd/go
GO-2023-1842: Improper sanitization of LDFLAGS with embedded spaces in go command with cgo in cmd/go
GO-2023-2095: Arbitrary code execution during build via line directives in cmd/go
GO-2023-2383: Command 'go get' may unexpectedly fallback to insecure git in cmd/go
GO-2024-2825: Arbitrary code execution during build on Darwin in cmd/go
GO-2024-2962: Output of "go env" does not sanitize values in cmd/go
GO-2025-3828: Unexpected command execution in untrusted VCS repositories in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Jan 25, 2018 GO-2021-0068 +16 more
GO-2021-0068: Arbitrary code injection via the go command with cgo on Windows in cmd/go
GO-2022-0203: Remote command execution via "go get" command with "-insecure" option in cmd/go
GO-2022-0475: Arbitrary code execution in go command with cgo in cmd/go and cmd/cgo
GO-2022-0476: Arbitrary code execution via the go command with cgo in cmd/go
GO-2023-1839: Code injection via go command with cgo in cmd/go
GO-2023-1841: Improper handling of non-optional LDFLAGS in go command with cgo in cmd/go
GO-2023-1842: Improper sanitization of LDFLAGS with embedded spaces in go command with cgo in cmd/go
GO-2023-2095: Arbitrary code execution during build via line directives in cmd/go
GO-2023-2383: Command 'go get' may unexpectedly fallback to insecure git in cmd/go
GO-2024-2825: Arbitrary code execution during build on Darwin in cmd/go
GO-2024-2962: Output of "go env" does not sanitize values in cmd/go
GO-2025-3828: Unexpected command execution in untrusted VCS repositories in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Jan 11, 2018 GO-2021-0068 +16 more
GO-2021-0068: Arbitrary code injection via the go command with cgo on Windows in cmd/go
GO-2022-0203: Remote command execution via "go get" command with "-insecure" option in cmd/go
GO-2022-0475: Arbitrary code execution in go command with cgo in cmd/go and cmd/cgo
GO-2022-0476: Arbitrary code execution via the go command with cgo in cmd/go
GO-2023-1839: Code injection via go command with cgo in cmd/go
GO-2023-1841: Improper handling of non-optional LDFLAGS in go command with cgo in cmd/go
GO-2023-1842: Improper sanitization of LDFLAGS with embedded spaces in go command with cgo in cmd/go
GO-2023-2095: Arbitrary code execution during build via line directives in cmd/go
GO-2023-2383: Command 'go get' may unexpectedly fallback to insecure git in cmd/go
GO-2024-2825: Arbitrary code execution during build on Darwin in cmd/go
GO-2024-2962: Output of "go env" does not sanitize values in cmd/go
GO-2025-3828: Unexpected command execution in untrusted VCS repositories in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Dec 7, 2017 GO-2021-0068 +16 more
GO-2021-0068: Arbitrary code injection via the go command with cgo on Windows in cmd/go
GO-2022-0203: Remote command execution via "go get" command with "-insecure" option in cmd/go
GO-2022-0475: Arbitrary code execution in go command with cgo in cmd/go and cmd/cgo
GO-2022-0476: Arbitrary code execution via the go command with cgo in cmd/go
GO-2023-1839: Code injection via go command with cgo in cmd/go
GO-2023-1841: Improper handling of non-optional LDFLAGS in go command with cgo in cmd/go
GO-2023-1842: Improper sanitization of LDFLAGS with embedded spaces in go command with cgo in cmd/go
GO-2023-2095: Arbitrary code execution during build via line directives in cmd/go
GO-2023-2383: Command 'go get' may unexpectedly fallback to insecure git in cmd/go
GO-2024-2825: Arbitrary code execution during build on Darwin in cmd/go
GO-2024-2962: Output of "go env" does not sanitize values in cmd/go
GO-2025-3828: Unexpected command execution in untrusted VCS repositories in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Jun 6, 2018 GO-2021-0068 +15 more
GO-2021-0068: Arbitrary code injection via the go command with cgo on Windows in cmd/go
GO-2022-0475: Arbitrary code execution in go command with cgo in cmd/go and cmd/cgo
GO-2022-0476: Arbitrary code execution via the go command with cgo in cmd/go
GO-2023-1839: Code injection via go command with cgo in cmd/go
GO-2023-1841: Improper handling of non-optional LDFLAGS in go command with cgo in cmd/go
GO-2023-1842: Improper sanitization of LDFLAGS with embedded spaces in go command with cgo in cmd/go
GO-2023-2095: Arbitrary code execution during build via line directives in cmd/go
GO-2023-2383: Command 'go get' may unexpectedly fallback to insecure git in cmd/go
GO-2024-2825: Arbitrary code execution during build on Darwin in cmd/go
GO-2024-2962: Output of "go env" does not sanitize values in cmd/go
GO-2025-3828: Unexpected command execution in untrusted VCS repositories in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Apr 30, 2018 GO-2021-0068 +15 more
GO-2021-0068: Arbitrary code injection via the go command with cgo on Windows in cmd/go
GO-2022-0475: Arbitrary code execution in go command with cgo in cmd/go and cmd/cgo
GO-2022-0476: Arbitrary code execution via the go command with cgo in cmd/go
GO-2023-1839: Code injection via go command with cgo in cmd/go
GO-2023-1841: Improper handling of non-optional LDFLAGS in go command with cgo in cmd/go
GO-2023-1842: Improper sanitization of LDFLAGS with embedded spaces in go command with cgo in cmd/go
GO-2023-2095: Arbitrary code execution during build via line directives in cmd/go
GO-2023-2383: Command 'go get' may unexpectedly fallback to insecure git in cmd/go
GO-2024-2825: Arbitrary code execution during build on Darwin in cmd/go
GO-2024-2962: Output of "go env" does not sanitize values in cmd/go
GO-2025-3828: Unexpected command execution in untrusted VCS repositories in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Mar 29, 2018 GO-2021-0068 +15 more
GO-2021-0068: Arbitrary code injection via the go command with cgo on Windows in cmd/go
GO-2022-0475: Arbitrary code execution in go command with cgo in cmd/go and cmd/cgo
GO-2022-0476: Arbitrary code execution via the go command with cgo in cmd/go
GO-2023-1839: Code injection via go command with cgo in cmd/go
GO-2023-1841: Improper handling of non-optional LDFLAGS in go command with cgo in cmd/go
GO-2023-1842: Improper sanitization of LDFLAGS with embedded spaces in go command with cgo in cmd/go
GO-2023-2095: Arbitrary code execution during build via line directives in cmd/go
GO-2023-2383: Command 'go get' may unexpectedly fallback to insecure git in cmd/go
GO-2024-2825: Arbitrary code execution during build on Darwin in cmd/go
GO-2024-2962: Output of "go env" does not sanitize values in cmd/go
GO-2025-3828: Unexpected command execution in untrusted VCS repositories in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Feb 7, 2018 GO-2021-0068 +16 more
GO-2021-0068: Arbitrary code injection via the go command with cgo on Windows in cmd/go
GO-2022-0203: Remote command execution via "go get" command with "-insecure" option in cmd/go
GO-2022-0475: Arbitrary code execution in go command with cgo in cmd/go and cmd/cgo
GO-2022-0476: Arbitrary code execution via the go command with cgo in cmd/go
GO-2023-1839: Code injection via go command with cgo in cmd/go
GO-2023-1841: Improper handling of non-optional LDFLAGS in go command with cgo in cmd/go
GO-2023-1842: Improper sanitization of LDFLAGS with embedded spaces in go command with cgo in cmd/go
GO-2023-2095: Arbitrary code execution during build via line directives in cmd/go
GO-2023-2383: Command 'go get' may unexpectedly fallback to insecure git in cmd/go
GO-2024-2825: Arbitrary code execution during build on Darwin in cmd/go
GO-2024-2962: Output of "go env" does not sanitize values in cmd/go
GO-2025-3828: Unexpected command execution in untrusted VCS repositories in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Jan 22, 2018 GO-2021-0068 +17 more
GO-2021-0068: Arbitrary code injection via the go command with cgo on Windows in cmd/go
GO-2022-0201: Remote command execution via "go get" command with cgo in cmd/go
GO-2022-0203: Remote command execution via "go get" command with "-insecure" option in cmd/go
GO-2022-0475: Arbitrary code execution in go command with cgo in cmd/go and cmd/cgo
GO-2022-0476: Arbitrary code execution via the go command with cgo in cmd/go
GO-2023-1839: Code injection via go command with cgo in cmd/go
GO-2023-1841: Improper handling of non-optional LDFLAGS in go command with cgo in cmd/go
GO-2023-1842: Improper sanitization of LDFLAGS with embedded spaces in go command with cgo in cmd/go
GO-2023-2095: Arbitrary code execution during build via line directives in cmd/go
GO-2023-2383: Command 'go get' may unexpectedly fallback to insecure git in cmd/go
GO-2024-2825: Arbitrary code execution during build on Darwin in cmd/go
GO-2024-2962: Output of "go env" does not sanitize values in cmd/go
GO-2025-3828: Unexpected command execution in untrusted VCS repositories in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Oct 25, 2017 GO-2021-0068 +17 more
GO-2021-0068: Arbitrary code injection via the go command with cgo on Windows in cmd/go
GO-2022-0201: Remote command execution via "go get" command with cgo in cmd/go
GO-2022-0203: Remote command execution via "go get" command with "-insecure" option in cmd/go
GO-2022-0475: Arbitrary code execution in go command with cgo in cmd/go and cmd/cgo
GO-2022-0476: Arbitrary code execution via the go command with cgo in cmd/go
GO-2023-1839: Code injection via go command with cgo in cmd/go
GO-2023-1841: Improper handling of non-optional LDFLAGS in go command with cgo in cmd/go
GO-2023-1842: Improper sanitization of LDFLAGS with embedded spaces in go command with cgo in cmd/go
GO-2023-2095: Arbitrary code execution during build via line directives in cmd/go
GO-2023-2383: Command 'go get' may unexpectedly fallback to insecure git in cmd/go
GO-2024-2825: Arbitrary code execution during build on Darwin in cmd/go
GO-2024-2962: Output of "go env" does not sanitize values in cmd/go
GO-2025-3828: Unexpected command execution in untrusted VCS repositories in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Oct 4, 2017 GO-2021-0068 +17 more
GO-2021-0068: Arbitrary code injection via the go command with cgo on Windows in cmd/go
GO-2022-0201: Remote command execution via "go get" command with cgo in cmd/go
GO-2022-0203: Remote command execution via "go get" command with "-insecure" option in cmd/go
GO-2022-0475: Arbitrary code execution in go command with cgo in cmd/go and cmd/cgo
GO-2022-0476: Arbitrary code execution via the go command with cgo in cmd/go
GO-2023-1839: Code injection via go command with cgo in cmd/go
GO-2023-1841: Improper handling of non-optional LDFLAGS in go command with cgo in cmd/go
GO-2023-1842: Improper sanitization of LDFLAGS with embedded spaces in go command with cgo in cmd/go
GO-2023-2095: Arbitrary code execution during build via line directives in cmd/go
GO-2023-2383: Command 'go get' may unexpectedly fallback to insecure git in cmd/go
GO-2024-2825: Arbitrary code execution during build on Darwin in cmd/go
GO-2024-2962: Output of "go env" does not sanitize values in cmd/go
GO-2025-3828: Unexpected command execution in untrusted VCS repositories in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Aug 24, 2017 GO-2021-0068 +18 more
GO-2021-0068: Arbitrary code injection via the go command with cgo on Windows in cmd/go
GO-2022-0177: Remote command execution via "go get" in cmd/go
GO-2022-0201: Remote command execution via "go get" command with cgo in cmd/go
GO-2022-0203: Remote command execution via "go get" command with "-insecure" option in cmd/go
GO-2022-0475: Arbitrary code execution in go command with cgo in cmd/go and cmd/cgo
GO-2022-0476: Arbitrary code execution via the go command with cgo in cmd/go
GO-2023-1839: Code injection via go command with cgo in cmd/go
GO-2023-1841: Improper handling of non-optional LDFLAGS in go command with cgo in cmd/go
GO-2023-1842: Improper sanitization of LDFLAGS with embedded spaces in go command with cgo in cmd/go
GO-2023-2095: Arbitrary code execution during build via line directives in cmd/go
GO-2023-2383: Command 'go get' may unexpectedly fallback to insecure git in cmd/go
GO-2024-2825: Arbitrary code execution during build on Darwin in cmd/go
GO-2024-2962: Output of "go env" does not sanitize values in cmd/go
GO-2025-3828: Unexpected command execution in untrusted VCS repositories in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Aug 7, 2017 GO-2021-0068 +18 more
GO-2021-0068: Arbitrary code injection via the go command with cgo on Windows in cmd/go
GO-2022-0177: Remote command execution via "go get" in cmd/go
GO-2022-0201: Remote command execution via "go get" command with cgo in cmd/go
GO-2022-0203: Remote command execution via "go get" command with "-insecure" option in cmd/go
GO-2022-0475: Arbitrary code execution in go command with cgo in cmd/go and cmd/cgo
GO-2022-0476: Arbitrary code execution via the go command with cgo in cmd/go
GO-2023-1839: Code injection via go command with cgo in cmd/go
GO-2023-1841: Improper handling of non-optional LDFLAGS in go command with cgo in cmd/go
GO-2023-1842: Improper sanitization of LDFLAGS with embedded spaces in go command with cgo in cmd/go
GO-2023-2095: Arbitrary code execution during build via line directives in cmd/go
GO-2023-2383: Command 'go get' may unexpectedly fallback to insecure git in cmd/go
GO-2024-2825: Arbitrary code execution during build on Darwin in cmd/go
GO-2024-2962: Output of "go env" does not sanitize values in cmd/go
GO-2025-3828: Unexpected command execution in untrusted VCS repositories in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Jul 24, 2017 GO-2021-0068 +18 more
GO-2021-0068: Arbitrary code injection via the go command with cgo on Windows in cmd/go
GO-2022-0177: Remote command execution via "go get" in cmd/go
GO-2022-0201: Remote command execution via "go get" command with cgo in cmd/go
GO-2022-0203: Remote command execution via "go get" command with "-insecure" option in cmd/go
GO-2022-0475: Arbitrary code execution in go command with cgo in cmd/go and cmd/cgo
GO-2022-0476: Arbitrary code execution via the go command with cgo in cmd/go
GO-2023-1839: Code injection via go command with cgo in cmd/go
GO-2023-1841: Improper handling of non-optional LDFLAGS in go command with cgo in cmd/go
GO-2023-1842: Improper sanitization of LDFLAGS with embedded spaces in go command with cgo in cmd/go
GO-2023-2095: Arbitrary code execution during build via line directives in cmd/go
GO-2023-2383: Command 'go get' may unexpectedly fallback to insecure git in cmd/go
GO-2024-2825: Arbitrary code execution during build on Darwin in cmd/go
GO-2024-2962: Output of "go env" does not sanitize values in cmd/go
GO-2025-3828: Unexpected command execution in untrusted VCS repositories in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Jun 26, 2017 GO-2021-0068 +18 more
GO-2021-0068: Arbitrary code injection via the go command with cgo on Windows in cmd/go
GO-2022-0177: Remote command execution via "go get" in cmd/go
GO-2022-0201: Remote command execution via "go get" command with cgo in cmd/go
GO-2022-0203: Remote command execution via "go get" command with "-insecure" option in cmd/go
GO-2022-0475: Arbitrary code execution in go command with cgo in cmd/go and cmd/cgo
GO-2022-0476: Arbitrary code execution via the go command with cgo in cmd/go
GO-2023-1839: Code injection via go command with cgo in cmd/go
GO-2023-1841: Improper handling of non-optional LDFLAGS in go command with cgo in cmd/go
GO-2023-1842: Improper sanitization of LDFLAGS with embedded spaces in go command with cgo in cmd/go
GO-2023-2095: Arbitrary code execution during build via line directives in cmd/go
GO-2023-2383: Command 'go get' may unexpectedly fallback to insecure git in cmd/go
GO-2024-2825: Arbitrary code execution during build on Darwin in cmd/go
GO-2024-2962: Output of "go env" does not sanitize values in cmd/go
GO-2025-3828: Unexpected command execution in untrusted VCS repositories in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Jun 14, 2017 GO-2021-0068 +18 more
GO-2021-0068: Arbitrary code injection via the go command with cgo on Windows in cmd/go
GO-2022-0177: Remote command execution via "go get" in cmd/go
GO-2022-0201: Remote command execution via "go get" command with cgo in cmd/go
GO-2022-0203: Remote command execution via "go get" command with "-insecure" option in cmd/go
GO-2022-0475: Arbitrary code execution in go command with cgo in cmd/go and cmd/cgo
GO-2022-0476: Arbitrary code execution via the go command with cgo in cmd/go
GO-2023-1839: Code injection via go command with cgo in cmd/go
GO-2023-1841: Improper handling of non-optional LDFLAGS in go command with cgo in cmd/go
GO-2023-1842: Improper sanitization of LDFLAGS with embedded spaces in go command with cgo in cmd/go
GO-2023-2095: Arbitrary code execution during build via line directives in cmd/go
GO-2023-2383: Command 'go get' may unexpectedly fallback to insecure git in cmd/go
GO-2024-2825: Arbitrary code execution during build on Darwin in cmd/go
GO-2024-2962: Output of "go env" does not sanitize values in cmd/go
GO-2025-3828: Unexpected command execution in untrusted VCS repositories in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Feb 7, 2018 GO-2021-0068 +16 more
GO-2021-0068: Arbitrary code injection via the go command with cgo on Windows in cmd/go
GO-2022-0203: Remote command execution via "go get" command with "-insecure" option in cmd/go
GO-2022-0475: Arbitrary code execution in go command with cgo in cmd/go and cmd/cgo
GO-2022-0476: Arbitrary code execution via the go command with cgo in cmd/go
GO-2023-1839: Code injection via go command with cgo in cmd/go
GO-2023-1841: Improper handling of non-optional LDFLAGS in go command with cgo in cmd/go
GO-2023-1842: Improper sanitization of LDFLAGS with embedded spaces in go command with cgo in cmd/go
GO-2023-2095: Arbitrary code execution during build via line directives in cmd/go
GO-2023-2383: Command 'go get' may unexpectedly fallback to insecure git in cmd/go
GO-2024-2825: Arbitrary code execution during build on Darwin in cmd/go
GO-2024-2962: Output of "go env" does not sanitize values in cmd/go
GO-2025-3828: Unexpected command execution in untrusted VCS repositories in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Jan 23, 2018 GO-2021-0068 +17 more
GO-2021-0068: Arbitrary code injection via the go command with cgo on Windows in cmd/go
GO-2022-0201: Remote command execution via "go get" command with cgo in cmd/go
GO-2022-0203: Remote command execution via "go get" command with "-insecure" option in cmd/go
GO-2022-0475: Arbitrary code execution in go command with cgo in cmd/go and cmd/cgo
GO-2022-0476: Arbitrary code execution via the go command with cgo in cmd/go
GO-2023-1839: Code injection via go command with cgo in cmd/go
GO-2023-1841: Improper handling of non-optional LDFLAGS in go command with cgo in cmd/go
GO-2023-1842: Improper sanitization of LDFLAGS with embedded spaces in go command with cgo in cmd/go
GO-2023-2095: Arbitrary code execution during build via line directives in cmd/go
GO-2023-2383: Command 'go get' may unexpectedly fallback to insecure git in cmd/go
GO-2024-2825: Arbitrary code execution during build on Darwin in cmd/go
GO-2024-2962: Output of "go env" does not sanitize values in cmd/go
GO-2025-3828: Unexpected command execution in untrusted VCS repositories in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Oct 25, 2017 GO-2021-0068 +17 more
GO-2021-0068: Arbitrary code injection via the go command with cgo on Windows in cmd/go
GO-2022-0201: Remote command execution via "go get" command with cgo in cmd/go
GO-2022-0203: Remote command execution via "go get" command with "-insecure" option in cmd/go
GO-2022-0475: Arbitrary code execution in go command with cgo in cmd/go and cmd/cgo
GO-2022-0476: Arbitrary code execution via the go command with cgo in cmd/go
GO-2023-1839: Code injection via go command with cgo in cmd/go
GO-2023-1841: Improper handling of non-optional LDFLAGS in go command with cgo in cmd/go
GO-2023-1842: Improper sanitization of LDFLAGS with embedded spaces in go command with cgo in cmd/go
GO-2023-2095: Arbitrary code execution during build via line directives in cmd/go
GO-2023-2383: Command 'go get' may unexpectedly fallback to insecure git in cmd/go
GO-2024-2825: Arbitrary code execution during build on Darwin in cmd/go
GO-2024-2962: Output of "go env" does not sanitize values in cmd/go
GO-2025-3828: Unexpected command execution in untrusted VCS repositories in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Oct 25, 2017 GO-2021-0068 +17 more
GO-2021-0068: Arbitrary code injection via the go command with cgo on Windows in cmd/go
GO-2022-0201: Remote command execution via "go get" command with cgo in cmd/go
GO-2022-0203: Remote command execution via "go get" command with "-insecure" option in cmd/go
GO-2022-0475: Arbitrary code execution in go command with cgo in cmd/go and cmd/cgo
GO-2022-0476: Arbitrary code execution via the go command with cgo in cmd/go
GO-2023-1839: Code injection via go command with cgo in cmd/go
GO-2023-1841: Improper handling of non-optional LDFLAGS in go command with cgo in cmd/go
GO-2023-1842: Improper sanitization of LDFLAGS with embedded spaces in go command with cgo in cmd/go
GO-2023-2095: Arbitrary code execution during build via line directives in cmd/go
GO-2023-2383: Command 'go get' may unexpectedly fallback to insecure git in cmd/go
GO-2024-2825: Arbitrary code execution during build on Darwin in cmd/go
GO-2024-2962: Output of "go env" does not sanitize values in cmd/go
GO-2025-3828: Unexpected command execution in untrusted VCS repositories in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Oct 20, 2017 GO-2021-0068 +17 more
GO-2021-0068: Arbitrary code injection via the go command with cgo on Windows in cmd/go
GO-2022-0201: Remote command execution via "go get" command with cgo in cmd/go
GO-2022-0203: Remote command execution via "go get" command with "-insecure" option in cmd/go
GO-2022-0475: Arbitrary code execution in go command with cgo in cmd/go and cmd/cgo
GO-2022-0476: Arbitrary code execution via the go command with cgo in cmd/go
GO-2023-1839: Code injection via go command with cgo in cmd/go
GO-2023-1841: Improper handling of non-optional LDFLAGS in go command with cgo in cmd/go
GO-2023-1842: Improper sanitization of LDFLAGS with embedded spaces in go command with cgo in cmd/go
GO-2023-2095: Arbitrary code execution during build via line directives in cmd/go
GO-2023-2383: Command 'go get' may unexpectedly fallback to insecure git in cmd/go
GO-2024-2825: Arbitrary code execution during build on Darwin in cmd/go
GO-2024-2962: Output of "go env" does not sanitize values in cmd/go
GO-2025-3828: Unexpected command execution in untrusted VCS repositories in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Oct 4, 2017 GO-2021-0068 +17 more
GO-2021-0068: Arbitrary code injection via the go command with cgo on Windows in cmd/go
GO-2022-0201: Remote command execution via "go get" command with cgo in cmd/go
GO-2022-0203: Remote command execution via "go get" command with "-insecure" option in cmd/go
GO-2022-0475: Arbitrary code execution in go command with cgo in cmd/go and cmd/cgo
GO-2022-0476: Arbitrary code execution via the go command with cgo in cmd/go
GO-2023-1839: Code injection via go command with cgo in cmd/go
GO-2023-1841: Improper handling of non-optional LDFLAGS in go command with cgo in cmd/go
GO-2023-1842: Improper sanitization of LDFLAGS with embedded spaces in go command with cgo in cmd/go
GO-2023-2095: Arbitrary code execution during build via line directives in cmd/go
GO-2023-2383: Command 'go get' may unexpectedly fallback to insecure git in cmd/go
GO-2024-2825: Arbitrary code execution during build on Darwin in cmd/go
GO-2024-2962: Output of "go env" does not sanitize values in cmd/go
GO-2025-3828: Unexpected command execution in untrusted VCS repositories in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
May 24, 2017 GO-2021-0068 +18 more
GO-2021-0068: Arbitrary code injection via the go command with cgo on Windows in cmd/go
GO-2022-0177: Remote command execution via "go get" in cmd/go
GO-2022-0201: Remote command execution via "go get" command with cgo in cmd/go
GO-2022-0203: Remote command execution via "go get" command with "-insecure" option in cmd/go
GO-2022-0475: Arbitrary code execution in go command with cgo in cmd/go and cmd/cgo
GO-2022-0476: Arbitrary code execution via the go command with cgo in cmd/go
GO-2023-1839: Code injection via go command with cgo in cmd/go
GO-2023-1841: Improper handling of non-optional LDFLAGS in go command with cgo in cmd/go
GO-2023-1842: Improper sanitization of LDFLAGS with embedded spaces in go command with cgo in cmd/go
GO-2023-2095: Arbitrary code execution during build via line directives in cmd/go
GO-2023-2383: Command 'go get' may unexpectedly fallback to insecure git in cmd/go
GO-2024-2825: Arbitrary code execution during build on Darwin in cmd/go
GO-2024-2962: Output of "go env" does not sanitize values in cmd/go
GO-2025-3828: Unexpected command execution in untrusted VCS repositories in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
May 23, 2017 GO-2021-0068 +18 more
GO-2021-0068: Arbitrary code injection via the go command with cgo on Windows in cmd/go
GO-2022-0177: Remote command execution via "go get" in cmd/go
GO-2022-0201: Remote command execution via "go get" command with cgo in cmd/go
GO-2022-0203: Remote command execution via "go get" command with "-insecure" option in cmd/go
GO-2022-0475: Arbitrary code execution in go command with cgo in cmd/go and cmd/cgo
GO-2022-0476: Arbitrary code execution via the go command with cgo in cmd/go
GO-2023-1839: Code injection via go command with cgo in cmd/go
GO-2023-1841: Improper handling of non-optional LDFLAGS in go command with cgo in cmd/go
GO-2023-1842: Improper sanitization of LDFLAGS with embedded spaces in go command with cgo in cmd/go
GO-2023-2095: Arbitrary code execution during build via line directives in cmd/go
GO-2023-2383: Command 'go get' may unexpectedly fallback to insecure git in cmd/go
GO-2024-2825: Arbitrary code execution during build on Darwin in cmd/go
GO-2024-2962: Output of "go env" does not sanitize values in cmd/go
GO-2025-3828: Unexpected command execution in untrusted VCS repositories in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Apr 7, 2017 GO-2021-0068 +18 more
GO-2021-0068: Arbitrary code injection via the go command with cgo on Windows in cmd/go
GO-2022-0177: Remote command execution via "go get" in cmd/go
GO-2022-0201: Remote command execution via "go get" command with cgo in cmd/go
GO-2022-0203: Remote command execution via "go get" command with "-insecure" option in cmd/go
GO-2022-0475: Arbitrary code execution in go command with cgo in cmd/go and cmd/cgo
GO-2022-0476: Arbitrary code execution via the go command with cgo in cmd/go
GO-2023-1839: Code injection via go command with cgo in cmd/go
GO-2023-1841: Improper handling of non-optional LDFLAGS in go command with cgo in cmd/go
GO-2023-1842: Improper sanitization of LDFLAGS with embedded spaces in go command with cgo in cmd/go
GO-2023-2095: Arbitrary code execution during build via line directives in cmd/go
GO-2023-2383: Command 'go get' may unexpectedly fallback to insecure git in cmd/go
GO-2024-2825: Arbitrary code execution during build on Darwin in cmd/go
GO-2024-2962: Output of "go env" does not sanitize values in cmd/go
GO-2025-3828: Unexpected command execution in untrusted VCS repositories in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Feb 16, 2017 GO-2021-0068 +18 more
GO-2021-0068: Arbitrary code injection via the go command with cgo on Windows in cmd/go
GO-2022-0177: Remote command execution via "go get" in cmd/go
GO-2022-0201: Remote command execution via "go get" command with cgo in cmd/go
GO-2022-0203: Remote command execution via "go get" command with "-insecure" option in cmd/go
GO-2022-0475: Arbitrary code execution in go command with cgo in cmd/go and cmd/cgo
GO-2022-0476: Arbitrary code execution via the go command with cgo in cmd/go
GO-2023-1839: Code injection via go command with cgo in cmd/go
GO-2023-1841: Improper handling of non-optional LDFLAGS in go command with cgo in cmd/go
GO-2023-1842: Improper sanitization of LDFLAGS with embedded spaces in go command with cgo in cmd/go
GO-2023-2095: Arbitrary code execution during build via line directives in cmd/go
GO-2023-2383: Command 'go get' may unexpectedly fallback to insecure git in cmd/go
GO-2024-2825: Arbitrary code execution during build on Darwin in cmd/go
GO-2024-2962: Output of "go env" does not sanitize values in cmd/go
GO-2025-3828: Unexpected command execution in untrusted VCS repositories in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Jan 26, 2017 GO-2021-0068 +18 more
GO-2021-0068: Arbitrary code injection via the go command with cgo on Windows in cmd/go
GO-2022-0177: Remote command execution via "go get" in cmd/go
GO-2022-0201: Remote command execution via "go get" command with cgo in cmd/go
GO-2022-0203: Remote command execution via "go get" command with "-insecure" option in cmd/go
GO-2022-0475: Arbitrary code execution in go command with cgo in cmd/go and cmd/cgo
GO-2022-0476: Arbitrary code execution via the go command with cgo in cmd/go
GO-2023-1839: Code injection via go command with cgo in cmd/go
GO-2023-1841: Improper handling of non-optional LDFLAGS in go command with cgo in cmd/go
GO-2023-1842: Improper sanitization of LDFLAGS with embedded spaces in go command with cgo in cmd/go
GO-2023-2095: Arbitrary code execution during build via line directives in cmd/go
GO-2023-2383: Command 'go get' may unexpectedly fallback to insecure git in cmd/go
GO-2024-2825: Arbitrary code execution during build on Darwin in cmd/go
GO-2024-2962: Output of "go env" does not sanitize values in cmd/go
GO-2025-3828: Unexpected command execution in untrusted VCS repositories in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Jan 19, 2017 GO-2021-0068 +18 more
GO-2021-0068: Arbitrary code injection via the go command with cgo on Windows in cmd/go
GO-2022-0177: Remote command execution via "go get" in cmd/go
GO-2022-0201: Remote command execution via "go get" command with cgo in cmd/go
GO-2022-0203: Remote command execution via "go get" command with "-insecure" option in cmd/go
GO-2022-0475: Arbitrary code execution in go command with cgo in cmd/go and cmd/cgo
GO-2022-0476: Arbitrary code execution via the go command with cgo in cmd/go
GO-2023-1839: Code injection via go command with cgo in cmd/go
GO-2023-1841: Improper handling of non-optional LDFLAGS in go command with cgo in cmd/go
GO-2023-1842: Improper sanitization of LDFLAGS with embedded spaces in go command with cgo in cmd/go
GO-2023-2095: Arbitrary code execution during build via line directives in cmd/go
GO-2023-2383: Command 'go get' may unexpectedly fallback to insecure git in cmd/go
GO-2024-2825: Arbitrary code execution during build on Darwin in cmd/go
GO-2024-2962: Output of "go env" does not sanitize values in cmd/go
GO-2025-3828: Unexpected command execution in untrusted VCS repositories in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Jan 10, 2017 GO-2021-0068 +18 more
GO-2021-0068: Arbitrary code injection via the go command with cgo on Windows in cmd/go
GO-2022-0177: Remote command execution via "go get" in cmd/go
GO-2022-0201: Remote command execution via "go get" command with cgo in cmd/go
GO-2022-0203: Remote command execution via "go get" command with "-insecure" option in cmd/go
GO-2022-0475: Arbitrary code execution in go command with cgo in cmd/go and cmd/cgo
GO-2022-0476: Arbitrary code execution via the go command with cgo in cmd/go
GO-2023-1839: Code injection via go command with cgo in cmd/go
GO-2023-1841: Improper handling of non-optional LDFLAGS in go command with cgo in cmd/go
GO-2023-1842: Improper sanitization of LDFLAGS with embedded spaces in go command with cgo in cmd/go
GO-2023-2095: Arbitrary code execution during build via line directives in cmd/go
GO-2023-2383: Command 'go get' may unexpectedly fallback to insecure git in cmd/go
GO-2024-2825: Arbitrary code execution during build on Darwin in cmd/go
GO-2024-2962: Output of "go env" does not sanitize values in cmd/go
GO-2025-3828: Unexpected command execution in untrusted VCS repositories in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Dec 15, 2016 GO-2021-0068 +18 more
GO-2021-0068: Arbitrary code injection via the go command with cgo on Windows in cmd/go
GO-2022-0177: Remote command execution via "go get" in cmd/go
GO-2022-0201: Remote command execution via "go get" command with cgo in cmd/go
GO-2022-0203: Remote command execution via "go get" command with "-insecure" option in cmd/go
GO-2022-0475: Arbitrary code execution in go command with cgo in cmd/go and cmd/cgo
GO-2022-0476: Arbitrary code execution via the go command with cgo in cmd/go
GO-2023-1839: Code injection via go command with cgo in cmd/go
GO-2023-1841: Improper handling of non-optional LDFLAGS in go command with cgo in cmd/go
GO-2023-1842: Improper sanitization of LDFLAGS with embedded spaces in go command with cgo in cmd/go
GO-2023-2095: Arbitrary code execution during build via line directives in cmd/go
GO-2023-2383: Command 'go get' may unexpectedly fallback to insecure git in cmd/go
GO-2024-2825: Arbitrary code execution during build on Darwin in cmd/go
GO-2024-2962: Output of "go env" does not sanitize values in cmd/go
GO-2025-3828: Unexpected command execution in untrusted VCS repositories in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Dec 1, 2016 GO-2021-0068 +18 more
GO-2021-0068: Arbitrary code injection via the go command with cgo on Windows in cmd/go
GO-2022-0177: Remote command execution via "go get" in cmd/go
GO-2022-0201: Remote command execution via "go get" command with cgo in cmd/go
GO-2022-0203: Remote command execution via "go get" command with "-insecure" option in cmd/go
GO-2022-0475: Arbitrary code execution in go command with cgo in cmd/go and cmd/cgo
GO-2022-0476: Arbitrary code execution via the go command with cgo in cmd/go
GO-2023-1839: Code injection via go command with cgo in cmd/go
GO-2023-1841: Improper handling of non-optional LDFLAGS in go command with cgo in cmd/go
GO-2023-1842: Improper sanitization of LDFLAGS with embedded spaces in go command with cgo in cmd/go
GO-2023-2095: Arbitrary code execution during build via line directives in cmd/go
GO-2023-2383: Command 'go get' may unexpectedly fallback to insecure git in cmd/go
GO-2024-2825: Arbitrary code execution during build on Darwin in cmd/go
GO-2024-2962: Output of "go env" does not sanitize values in cmd/go
GO-2025-3828: Unexpected command execution in untrusted VCS repositories in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
May 23, 2017 GO-2021-0068 +18 more
GO-2021-0068: Arbitrary code injection via the go command with cgo on Windows in cmd/go
GO-2022-0177: Remote command execution via "go get" in cmd/go
GO-2022-0201: Remote command execution via "go get" command with cgo in cmd/go
GO-2022-0203: Remote command execution via "go get" command with "-insecure" option in cmd/go
GO-2022-0475: Arbitrary code execution in go command with cgo in cmd/go and cmd/cgo
GO-2022-0476: Arbitrary code execution via the go command with cgo in cmd/go
GO-2023-1839: Code injection via go command with cgo in cmd/go
GO-2023-1841: Improper handling of non-optional LDFLAGS in go command with cgo in cmd/go
GO-2023-1842: Improper sanitization of LDFLAGS with embedded spaces in go command with cgo in cmd/go
GO-2023-2095: Arbitrary code execution during build via line directives in cmd/go
GO-2023-2383: Command 'go get' may unexpectedly fallback to insecure git in cmd/go
GO-2024-2825: Arbitrary code execution during build on Darwin in cmd/go
GO-2024-2962: Output of "go env" does not sanitize values in cmd/go
GO-2025-3828: Unexpected command execution in untrusted VCS repositories in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Jan 26, 2017 GO-2021-0068 +18 more
GO-2021-0068: Arbitrary code injection via the go command with cgo on Windows in cmd/go
GO-2022-0177: Remote command execution via "go get" in cmd/go
GO-2022-0201: Remote command execution via "go get" command with cgo in cmd/go
GO-2022-0203: Remote command execution via "go get" command with "-insecure" option in cmd/go
GO-2022-0475: Arbitrary code execution in go command with cgo in cmd/go and cmd/cgo
GO-2022-0476: Arbitrary code execution via the go command with cgo in cmd/go
GO-2023-1839: Code injection via go command with cgo in cmd/go
GO-2023-1841: Improper handling of non-optional LDFLAGS in go command with cgo in cmd/go
GO-2023-1842: Improper sanitization of LDFLAGS with embedded spaces in go command with cgo in cmd/go
GO-2023-2095: Arbitrary code execution during build via line directives in cmd/go
GO-2023-2383: Command 'go get' may unexpectedly fallback to insecure git in cmd/go
GO-2024-2825: Arbitrary code execution during build on Darwin in cmd/go
GO-2024-2962: Output of "go env" does not sanitize values in cmd/go
GO-2025-3828: Unexpected command execution in untrusted VCS repositories in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Dec 1, 2016 GO-2021-0068 +18 more
GO-2021-0068: Arbitrary code injection via the go command with cgo on Windows in cmd/go
GO-2022-0177: Remote command execution via "go get" in cmd/go
GO-2022-0201: Remote command execution via "go get" command with cgo in cmd/go
GO-2022-0203: Remote command execution via "go get" command with "-insecure" option in cmd/go
GO-2022-0475: Arbitrary code execution in go command with cgo in cmd/go and cmd/cgo
GO-2022-0476: Arbitrary code execution via the go command with cgo in cmd/go
GO-2023-1839: Code injection via go command with cgo in cmd/go
GO-2023-1841: Improper handling of non-optional LDFLAGS in go command with cgo in cmd/go
GO-2023-1842: Improper sanitization of LDFLAGS with embedded spaces in go command with cgo in cmd/go
GO-2023-2095: Arbitrary code execution during build via line directives in cmd/go
GO-2023-2383: Command 'go get' may unexpectedly fallback to insecure git in cmd/go
GO-2024-2825: Arbitrary code execution during build on Darwin in cmd/go
GO-2024-2962: Output of "go env" does not sanitize values in cmd/go
GO-2025-3828: Unexpected command execution in untrusted VCS repositories in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Oct 19, 2016 GO-2021-0068 +18 more
GO-2021-0068: Arbitrary code injection via the go command with cgo on Windows in cmd/go
GO-2022-0177: Remote command execution via "go get" in cmd/go
GO-2022-0201: Remote command execution via "go get" command with cgo in cmd/go
GO-2022-0203: Remote command execution via "go get" command with "-insecure" option in cmd/go
GO-2022-0475: Arbitrary code execution in go command with cgo in cmd/go and cmd/cgo
GO-2022-0476: Arbitrary code execution via the go command with cgo in cmd/go
GO-2023-1839: Code injection via go command with cgo in cmd/go
GO-2023-1841: Improper handling of non-optional LDFLAGS in go command with cgo in cmd/go
GO-2023-1842: Improper sanitization of LDFLAGS with embedded spaces in go command with cgo in cmd/go
GO-2023-2095: Arbitrary code execution during build via line directives in cmd/go
GO-2023-2383: Command 'go get' may unexpectedly fallback to insecure git in cmd/go
GO-2024-2825: Arbitrary code execution during build on Darwin in cmd/go
GO-2024-2962: Output of "go env" does not sanitize values in cmd/go
GO-2025-3828: Unexpected command execution in untrusted VCS repositories in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Oct 17, 2016 GO-2021-0068 +18 more
GO-2021-0068: Arbitrary code injection via the go command with cgo on Windows in cmd/go
GO-2022-0177: Remote command execution via "go get" in cmd/go
GO-2022-0201: Remote command execution via "go get" command with cgo in cmd/go
GO-2022-0203: Remote command execution via "go get" command with "-insecure" option in cmd/go
GO-2022-0475: Arbitrary code execution in go command with cgo in cmd/go and cmd/cgo
GO-2022-0476: Arbitrary code execution via the go command with cgo in cmd/go
GO-2023-1839: Code injection via go command with cgo in cmd/go
GO-2023-1841: Improper handling of non-optional LDFLAGS in go command with cgo in cmd/go
GO-2023-1842: Improper sanitization of LDFLAGS with embedded spaces in go command with cgo in cmd/go
GO-2023-2095: Arbitrary code execution during build via line directives in cmd/go
GO-2023-2383: Command 'go get' may unexpectedly fallback to insecure git in cmd/go
GO-2024-2825: Arbitrary code execution during build on Darwin in cmd/go
GO-2024-2962: Output of "go env" does not sanitize values in cmd/go
GO-2025-3828: Unexpected command execution in untrusted VCS repositories in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Sep 7, 2016 GO-2021-0068 +18 more
GO-2021-0068: Arbitrary code injection via the go command with cgo on Windows in cmd/go
GO-2022-0177: Remote command execution via "go get" in cmd/go
GO-2022-0201: Remote command execution via "go get" command with cgo in cmd/go
GO-2022-0203: Remote command execution via "go get" command with "-insecure" option in cmd/go
GO-2022-0475: Arbitrary code execution in go command with cgo in cmd/go and cmd/cgo
GO-2022-0476: Arbitrary code execution via the go command with cgo in cmd/go
GO-2023-1839: Code injection via go command with cgo in cmd/go
GO-2023-1841: Improper handling of non-optional LDFLAGS in go command with cgo in cmd/go
GO-2023-1842: Improper sanitization of LDFLAGS with embedded spaces in go command with cgo in cmd/go
GO-2023-2095: Arbitrary code execution during build via line directives in cmd/go
GO-2023-2383: Command 'go get' may unexpectedly fallback to insecure git in cmd/go
GO-2024-2825: Arbitrary code execution during build on Darwin in cmd/go
GO-2024-2962: Output of "go env" does not sanitize values in cmd/go
GO-2025-3828: Unexpected command execution in untrusted VCS repositories in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Aug 15, 2016 GO-2021-0068 +18 more
GO-2021-0068: Arbitrary code injection via the go command with cgo on Windows in cmd/go
GO-2022-0177: Remote command execution via "go get" in cmd/go
GO-2022-0201: Remote command execution via "go get" command with cgo in cmd/go
GO-2022-0203: Remote command execution via "go get" command with "-insecure" option in cmd/go
GO-2022-0475: Arbitrary code execution in go command with cgo in cmd/go and cmd/cgo
GO-2022-0476: Arbitrary code execution via the go command with cgo in cmd/go
GO-2023-1839: Code injection via go command with cgo in cmd/go
GO-2023-1841: Improper handling of non-optional LDFLAGS in go command with cgo in cmd/go
GO-2023-1842: Improper sanitization of LDFLAGS with embedded spaces in go command with cgo in cmd/go
GO-2023-2095: Arbitrary code execution during build via line directives in cmd/go
GO-2023-2383: Command 'go get' may unexpectedly fallback to insecure git in cmd/go
GO-2024-2825: Arbitrary code execution during build on Darwin in cmd/go
GO-2024-2962: Output of "go env" does not sanitize values in cmd/go
GO-2025-3828: Unexpected command execution in untrusted VCS repositories in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Aug 8, 2016 GO-2021-0068 +18 more
GO-2021-0068: Arbitrary code injection via the go command with cgo on Windows in cmd/go
GO-2022-0177: Remote command execution via "go get" in cmd/go
GO-2022-0201: Remote command execution via "go get" command with cgo in cmd/go
GO-2022-0203: Remote command execution via "go get" command with "-insecure" option in cmd/go
GO-2022-0475: Arbitrary code execution in go command with cgo in cmd/go and cmd/cgo
GO-2022-0476: Arbitrary code execution via the go command with cgo in cmd/go
GO-2023-1839: Code injection via go command with cgo in cmd/go
GO-2023-1841: Improper handling of non-optional LDFLAGS in go command with cgo in cmd/go
GO-2023-1842: Improper sanitization of LDFLAGS with embedded spaces in go command with cgo in cmd/go
GO-2023-2095: Arbitrary code execution during build via line directives in cmd/go
GO-2023-2383: Command 'go get' may unexpectedly fallback to insecure git in cmd/go
GO-2024-2825: Arbitrary code execution during build on Darwin in cmd/go
GO-2024-2962: Output of "go env" does not sanitize values in cmd/go
GO-2025-3828: Unexpected command execution in untrusted VCS repositories in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Aug 2, 2016 GO-2021-0068 +18 more
GO-2021-0068: Arbitrary code injection via the go command with cgo on Windows in cmd/go
GO-2022-0177: Remote command execution via "go get" in cmd/go
GO-2022-0201: Remote command execution via "go get" command with cgo in cmd/go
GO-2022-0203: Remote command execution via "go get" command with "-insecure" option in cmd/go
GO-2022-0475: Arbitrary code execution in go command with cgo in cmd/go and cmd/cgo
GO-2022-0476: Arbitrary code execution via the go command with cgo in cmd/go
GO-2023-1839: Code injection via go command with cgo in cmd/go
GO-2023-1841: Improper handling of non-optional LDFLAGS in go command with cgo in cmd/go
GO-2023-1842: Improper sanitization of LDFLAGS with embedded spaces in go command with cgo in cmd/go
GO-2023-2095: Arbitrary code execution during build via line directives in cmd/go
GO-2023-2383: Command 'go get' may unexpectedly fallback to insecure git in cmd/go
GO-2024-2825: Arbitrary code execution during build on Darwin in cmd/go
GO-2024-2962: Output of "go env" does not sanitize values in cmd/go
GO-2025-3828: Unexpected command execution in untrusted VCS repositories in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Aug 2, 2016 GO-2021-0068 +18 more
GO-2021-0068: Arbitrary code injection via the go command with cgo on Windows in cmd/go
GO-2022-0177: Remote command execution via "go get" in cmd/go
GO-2022-0201: Remote command execution via "go get" command with cgo in cmd/go
GO-2022-0203: Remote command execution via "go get" command with "-insecure" option in cmd/go
GO-2022-0475: Arbitrary code execution in go command with cgo in cmd/go and cmd/cgo
GO-2022-0476: Arbitrary code execution via the go command with cgo in cmd/go
GO-2023-1839: Code injection via go command with cgo in cmd/go
GO-2023-1841: Improper handling of non-optional LDFLAGS in go command with cgo in cmd/go
GO-2023-1842: Improper sanitization of LDFLAGS with embedded spaces in go command with cgo in cmd/go
GO-2023-2095: Arbitrary code execution during build via line directives in cmd/go
GO-2023-2383: Command 'go get' may unexpectedly fallback to insecure git in cmd/go
GO-2024-2825: Arbitrary code execution during build on Darwin in cmd/go
GO-2024-2962: Output of "go env" does not sanitize values in cmd/go
GO-2025-3828: Unexpected command execution in untrusted VCS repositories in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Jul 21, 2016 GO-2021-0068 +18 more
GO-2021-0068: Arbitrary code injection via the go command with cgo on Windows in cmd/go
GO-2022-0177: Remote command execution via "go get" in cmd/go
GO-2022-0201: Remote command execution via "go get" command with cgo in cmd/go
GO-2022-0203: Remote command execution via "go get" command with "-insecure" option in cmd/go
GO-2022-0475: Arbitrary code execution in go command with cgo in cmd/go and cmd/cgo
GO-2022-0476: Arbitrary code execution via the go command with cgo in cmd/go
GO-2023-1839: Code injection via go command with cgo in cmd/go
GO-2023-1841: Improper handling of non-optional LDFLAGS in go command with cgo in cmd/go
GO-2023-1842: Improper sanitization of LDFLAGS with embedded spaces in go command with cgo in cmd/go
GO-2023-2095: Arbitrary code execution during build via line directives in cmd/go
GO-2023-2383: Command 'go get' may unexpectedly fallback to insecure git in cmd/go
GO-2024-2825: Arbitrary code execution during build on Darwin in cmd/go
GO-2024-2962: Output of "go env" does not sanitize values in cmd/go
GO-2025-3828: Unexpected command execution in untrusted VCS repositories in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Jul 18, 2016 GO-2021-0068 +18 more
GO-2021-0068: Arbitrary code injection via the go command with cgo on Windows in cmd/go
GO-2022-0177: Remote command execution via "go get" in cmd/go
GO-2022-0201: Remote command execution via "go get" command with cgo in cmd/go
GO-2022-0203: Remote command execution via "go get" command with "-insecure" option in cmd/go
GO-2022-0475: Arbitrary code execution in go command with cgo in cmd/go and cmd/cgo
GO-2022-0476: Arbitrary code execution via the go command with cgo in cmd/go
GO-2023-1839: Code injection via go command with cgo in cmd/go
GO-2023-1841: Improper handling of non-optional LDFLAGS in go command with cgo in cmd/go
GO-2023-1842: Improper sanitization of LDFLAGS with embedded spaces in go command with cgo in cmd/go
GO-2023-2095: Arbitrary code execution during build via line directives in cmd/go
GO-2023-2383: Command 'go get' may unexpectedly fallback to insecure git in cmd/go
GO-2024-2825: Arbitrary code execution during build on Darwin in cmd/go
GO-2024-2962: Output of "go env" does not sanitize values in cmd/go
GO-2025-3828: Unexpected command execution in untrusted VCS repositories in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Jul 8, 2016 GO-2021-0068 +18 more
GO-2021-0068: Arbitrary code injection via the go command with cgo on Windows in cmd/go
GO-2022-0177: Remote command execution via "go get" in cmd/go
GO-2022-0201: Remote command execution via "go get" command with cgo in cmd/go
GO-2022-0203: Remote command execution via "go get" command with "-insecure" option in cmd/go
GO-2022-0475: Arbitrary code execution in go command with cgo in cmd/go and cmd/cgo
GO-2022-0476: Arbitrary code execution via the go command with cgo in cmd/go
GO-2023-1839: Code injection via go command with cgo in cmd/go
GO-2023-1841: Improper handling of non-optional LDFLAGS in go command with cgo in cmd/go
GO-2023-1842: Improper sanitization of LDFLAGS with embedded spaces in go command with cgo in cmd/go
GO-2023-2095: Arbitrary code execution during build via line directives in cmd/go
GO-2023-2383: Command 'go get' may unexpectedly fallback to insecure git in cmd/go
GO-2024-2825: Arbitrary code execution during build on Darwin in cmd/go
GO-2024-2962: Output of "go env" does not sanitize values in cmd/go
GO-2025-3828: Unexpected command execution in untrusted VCS repositories in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Jun 16, 2016 GO-2021-0068 +18 more
GO-2021-0068: Arbitrary code injection via the go command with cgo on Windows in cmd/go
GO-2022-0177: Remote command execution via "go get" in cmd/go
GO-2022-0201: Remote command execution via "go get" command with cgo in cmd/go
GO-2022-0203: Remote command execution via "go get" command with "-insecure" option in cmd/go
GO-2022-0475: Arbitrary code execution in go command with cgo in cmd/go and cmd/cgo
GO-2022-0476: Arbitrary code execution via the go command with cgo in cmd/go
GO-2023-1839: Code injection via go command with cgo in cmd/go
GO-2023-1841: Improper handling of non-optional LDFLAGS in go command with cgo in cmd/go
GO-2023-1842: Improper sanitization of LDFLAGS with embedded spaces in go command with cgo in cmd/go
GO-2023-2095: Arbitrary code execution during build via line directives in cmd/go
GO-2023-2383: Command 'go get' may unexpectedly fallback to insecure git in cmd/go
GO-2024-2825: Arbitrary code execution during build on Darwin in cmd/go
GO-2024-2962: Output of "go env" does not sanitize values in cmd/go
GO-2025-3828: Unexpected command execution in untrusted VCS repositories in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Jun 2, 2016 GO-2021-0068 +18 more
GO-2021-0068: Arbitrary code injection via the go command with cgo on Windows in cmd/go
GO-2022-0177: Remote command execution via "go get" in cmd/go
GO-2022-0201: Remote command execution via "go get" command with cgo in cmd/go
GO-2022-0203: Remote command execution via "go get" command with "-insecure" option in cmd/go
GO-2022-0475: Arbitrary code execution in go command with cgo in cmd/go and cmd/cgo
GO-2022-0476: Arbitrary code execution via the go command with cgo in cmd/go
GO-2023-1839: Code injection via go command with cgo in cmd/go
GO-2023-1841: Improper handling of non-optional LDFLAGS in go command with cgo in cmd/go
GO-2023-1842: Improper sanitization of LDFLAGS with embedded spaces in go command with cgo in cmd/go
GO-2023-2095: Arbitrary code execution during build via line directives in cmd/go
GO-2023-2383: Command 'go get' may unexpectedly fallback to insecure git in cmd/go
GO-2024-2825: Arbitrary code execution during build on Darwin in cmd/go
GO-2024-2962: Output of "go env" does not sanitize values in cmd/go
GO-2025-3828: Unexpected command execution in untrusted VCS repositories in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Dec 1, 2016 GO-2021-0068 +18 more
GO-2021-0068: Arbitrary code injection via the go command with cgo on Windows in cmd/go
GO-2022-0177: Remote command execution via "go get" in cmd/go
GO-2022-0201: Remote command execution via "go get" command with cgo in cmd/go
GO-2022-0203: Remote command execution via "go get" command with "-insecure" option in cmd/go
GO-2022-0475: Arbitrary code execution in go command with cgo in cmd/go and cmd/cgo
GO-2022-0476: Arbitrary code execution via the go command with cgo in cmd/go
GO-2023-1839: Code injection via go command with cgo in cmd/go
GO-2023-1841: Improper handling of non-optional LDFLAGS in go command with cgo in cmd/go
GO-2023-1842: Improper sanitization of LDFLAGS with embedded spaces in go command with cgo in cmd/go
GO-2023-2095: Arbitrary code execution during build via line directives in cmd/go
GO-2023-2383: Command 'go get' may unexpectedly fallback to insecure git in cmd/go
GO-2024-2825: Arbitrary code execution during build on Darwin in cmd/go
GO-2024-2962: Output of "go env" does not sanitize values in cmd/go
GO-2025-3828: Unexpected command execution in untrusted VCS repositories in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Jul 18, 2016 GO-2021-0068 +18 more
GO-2021-0068: Arbitrary code injection via the go command with cgo on Windows in cmd/go
GO-2022-0177: Remote command execution via "go get" in cmd/go
GO-2022-0201: Remote command execution via "go get" command with cgo in cmd/go
GO-2022-0203: Remote command execution via "go get" command with "-insecure" option in cmd/go
GO-2022-0475: Arbitrary code execution in go command with cgo in cmd/go and cmd/cgo
GO-2022-0476: Arbitrary code execution via the go command with cgo in cmd/go
GO-2023-1839: Code injection via go command with cgo in cmd/go
GO-2023-1841: Improper handling of non-optional LDFLAGS in go command with cgo in cmd/go
GO-2023-1842: Improper sanitization of LDFLAGS with embedded spaces in go command with cgo in cmd/go
GO-2023-2095: Arbitrary code execution during build via line directives in cmd/go
GO-2023-2383: Command 'go get' may unexpectedly fallback to insecure git in cmd/go
GO-2024-2825: Arbitrary code execution during build on Darwin in cmd/go
GO-2024-2962: Output of "go env" does not sanitize values in cmd/go
GO-2025-3828: Unexpected command execution in untrusted VCS repositories in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Apr 19, 2016 GO-2021-0068 +18 more
GO-2021-0068: Arbitrary code injection via the go command with cgo on Windows in cmd/go
GO-2022-0177: Remote command execution via "go get" in cmd/go
GO-2022-0201: Remote command execution via "go get" command with cgo in cmd/go
GO-2022-0203: Remote command execution via "go get" command with "-insecure" option in cmd/go
GO-2022-0475: Arbitrary code execution in go command with cgo in cmd/go and cmd/cgo
GO-2022-0476: Arbitrary code execution via the go command with cgo in cmd/go
GO-2023-1839: Code injection via go command with cgo in cmd/go
GO-2023-1841: Improper handling of non-optional LDFLAGS in go command with cgo in cmd/go
GO-2023-1842: Improper sanitization of LDFLAGS with embedded spaces in go command with cgo in cmd/go
GO-2023-2095: Arbitrary code execution during build via line directives in cmd/go
GO-2023-2383: Command 'go get' may unexpectedly fallback to insecure git in cmd/go
GO-2024-2825: Arbitrary code execution during build on Darwin in cmd/go
GO-2024-2962: Output of "go env" does not sanitize values in cmd/go
GO-2025-3828: Unexpected command execution in untrusted VCS repositories in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Apr 11, 2016 GO-2021-0068 +18 more
GO-2021-0068: Arbitrary code injection via the go command with cgo on Windows in cmd/go
GO-2022-0177: Remote command execution via "go get" in cmd/go
GO-2022-0201: Remote command execution via "go get" command with cgo in cmd/go
GO-2022-0203: Remote command execution via "go get" command with "-insecure" option in cmd/go
GO-2022-0475: Arbitrary code execution in go command with cgo in cmd/go and cmd/cgo
GO-2022-0476: Arbitrary code execution via the go command with cgo in cmd/go
GO-2023-1839: Code injection via go command with cgo in cmd/go
GO-2023-1841: Improper handling of non-optional LDFLAGS in go command with cgo in cmd/go
GO-2023-1842: Improper sanitization of LDFLAGS with embedded spaces in go command with cgo in cmd/go
GO-2023-2095: Arbitrary code execution during build via line directives in cmd/go
GO-2023-2383: Command 'go get' may unexpectedly fallback to insecure git in cmd/go
GO-2024-2825: Arbitrary code execution during build on Darwin in cmd/go
GO-2024-2962: Output of "go env" does not sanitize values in cmd/go
GO-2025-3828: Unexpected command execution in untrusted VCS repositories in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Feb 17, 2016 GO-2021-0068 +18 more
GO-2021-0068: Arbitrary code injection via the go command with cgo on Windows in cmd/go
GO-2022-0177: Remote command execution via "go get" in cmd/go
GO-2022-0201: Remote command execution via "go get" command with cgo in cmd/go
GO-2022-0203: Remote command execution via "go get" command with "-insecure" option in cmd/go
GO-2022-0475: Arbitrary code execution in go command with cgo in cmd/go and cmd/cgo
GO-2022-0476: Arbitrary code execution via the go command with cgo in cmd/go
GO-2023-1839: Code injection via go command with cgo in cmd/go
GO-2023-1841: Improper handling of non-optional LDFLAGS in go command with cgo in cmd/go
GO-2023-1842: Improper sanitization of LDFLAGS with embedded spaces in go command with cgo in cmd/go
GO-2023-2095: Arbitrary code execution during build via line directives in cmd/go
GO-2023-2383: Command 'go get' may unexpectedly fallback to insecure git in cmd/go
GO-2024-2825: Arbitrary code execution during build on Darwin in cmd/go
GO-2024-2962: Output of "go env" does not sanitize values in cmd/go
GO-2025-3828: Unexpected command execution in untrusted VCS repositories in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Feb 3, 2016 GO-2021-0068 +18 more
GO-2021-0068: Arbitrary code injection via the go command with cgo on Windows in cmd/go
GO-2022-0177: Remote command execution via "go get" in cmd/go
GO-2022-0201: Remote command execution via "go get" command with cgo in cmd/go
GO-2022-0203: Remote command execution via "go get" command with "-insecure" option in cmd/go
GO-2022-0475: Arbitrary code execution in go command with cgo in cmd/go and cmd/cgo
GO-2022-0476: Arbitrary code execution via the go command with cgo in cmd/go
GO-2023-1839: Code injection via go command with cgo in cmd/go
GO-2023-1841: Improper handling of non-optional LDFLAGS in go command with cgo in cmd/go
GO-2023-1842: Improper sanitization of LDFLAGS with embedded spaces in go command with cgo in cmd/go
GO-2023-2095: Arbitrary code execution during build via line directives in cmd/go
GO-2023-2383: Command 'go get' may unexpectedly fallback to insecure git in cmd/go
GO-2024-2825: Arbitrary code execution during build on Darwin in cmd/go
GO-2024-2962: Output of "go env" does not sanitize values in cmd/go
GO-2025-3828: Unexpected command execution in untrusted VCS repositories in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Jan 28, 2016 GO-2021-0068 +18 more
GO-2021-0068: Arbitrary code injection via the go command with cgo on Windows in cmd/go
GO-2022-0177: Remote command execution via "go get" in cmd/go
GO-2022-0201: Remote command execution via "go get" command with cgo in cmd/go
GO-2022-0203: Remote command execution via "go get" command with "-insecure" option in cmd/go
GO-2022-0475: Arbitrary code execution in go command with cgo in cmd/go and cmd/cgo
GO-2022-0476: Arbitrary code execution via the go command with cgo in cmd/go
GO-2023-1839: Code injection via go command with cgo in cmd/go
GO-2023-1841: Improper handling of non-optional LDFLAGS in go command with cgo in cmd/go
GO-2023-1842: Improper sanitization of LDFLAGS with embedded spaces in go command with cgo in cmd/go
GO-2023-2095: Arbitrary code execution during build via line directives in cmd/go
GO-2023-2383: Command 'go get' may unexpectedly fallback to insecure git in cmd/go
GO-2024-2825: Arbitrary code execution during build on Darwin in cmd/go
GO-2024-2962: Output of "go env" does not sanitize values in cmd/go
GO-2025-3828: Unexpected command execution in untrusted VCS repositories in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Jan 13, 2016 GO-2021-0068 +18 more
GO-2021-0068: Arbitrary code injection via the go command with cgo on Windows in cmd/go
GO-2022-0177: Remote command execution via "go get" in cmd/go
GO-2022-0201: Remote command execution via "go get" command with cgo in cmd/go
GO-2022-0203: Remote command execution via "go get" command with "-insecure" option in cmd/go
GO-2022-0475: Arbitrary code execution in go command with cgo in cmd/go and cmd/cgo
GO-2022-0476: Arbitrary code execution via the go command with cgo in cmd/go
GO-2023-1839: Code injection via go command with cgo in cmd/go
GO-2023-1841: Improper handling of non-optional LDFLAGS in go command with cgo in cmd/go
GO-2023-1842: Improper sanitization of LDFLAGS with embedded spaces in go command with cgo in cmd/go
GO-2023-2095: Arbitrary code execution during build via line directives in cmd/go
GO-2023-2383: Command 'go get' may unexpectedly fallback to insecure git in cmd/go
GO-2024-2825: Arbitrary code execution during build on Darwin in cmd/go
GO-2024-2962: Output of "go env" does not sanitize values in cmd/go
GO-2025-3828: Unexpected command execution in untrusted VCS repositories in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Dec 17, 2015 GO-2021-0068 +18 more
GO-2021-0068: Arbitrary code injection via the go command with cgo on Windows in cmd/go
GO-2022-0177: Remote command execution via "go get" in cmd/go
GO-2022-0201: Remote command execution via "go get" command with cgo in cmd/go
GO-2022-0203: Remote command execution via "go get" command with "-insecure" option in cmd/go
GO-2022-0475: Arbitrary code execution in go command with cgo in cmd/go and cmd/cgo
GO-2022-0476: Arbitrary code execution via the go command with cgo in cmd/go
GO-2023-1839: Code injection via go command with cgo in cmd/go
GO-2023-1841: Improper handling of non-optional LDFLAGS in go command with cgo in cmd/go
GO-2023-1842: Improper sanitization of LDFLAGS with embedded spaces in go command with cgo in cmd/go
GO-2023-2095: Arbitrary code execution during build via line directives in cmd/go
GO-2023-2383: Command 'go get' may unexpectedly fallback to insecure git in cmd/go
GO-2024-2825: Arbitrary code execution during build on Darwin in cmd/go
GO-2024-2962: Output of "go env" does not sanitize values in cmd/go
GO-2025-3828: Unexpected command execution in untrusted VCS repositories in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Apr 11, 2016 GO-2021-0068 +18 more
GO-2021-0068: Arbitrary code injection via the go command with cgo on Windows in cmd/go
GO-2022-0177: Remote command execution via "go get" in cmd/go
GO-2022-0201: Remote command execution via "go get" command with cgo in cmd/go
GO-2022-0203: Remote command execution via "go get" command with "-insecure" option in cmd/go
GO-2022-0475: Arbitrary code execution in go command with cgo in cmd/go and cmd/cgo
GO-2022-0476: Arbitrary code execution via the go command with cgo in cmd/go
GO-2023-1839: Code injection via go command with cgo in cmd/go
GO-2023-1841: Improper handling of non-optional LDFLAGS in go command with cgo in cmd/go
GO-2023-1842: Improper sanitization of LDFLAGS with embedded spaces in go command with cgo in cmd/go
GO-2023-2095: Arbitrary code execution during build via line directives in cmd/go
GO-2023-2383: Command 'go get' may unexpectedly fallback to insecure git in cmd/go
GO-2024-2825: Arbitrary code execution during build on Darwin in cmd/go
GO-2024-2962: Output of "go env" does not sanitize values in cmd/go
GO-2025-3828: Unexpected command execution in untrusted VCS repositories in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Jan 13, 2016 GO-2021-0068 +18 more
GO-2021-0068: Arbitrary code injection via the go command with cgo on Windows in cmd/go
GO-2022-0177: Remote command execution via "go get" in cmd/go
GO-2022-0201: Remote command execution via "go get" command with cgo in cmd/go
GO-2022-0203: Remote command execution via "go get" command with "-insecure" option in cmd/go
GO-2022-0475: Arbitrary code execution in go command with cgo in cmd/go and cmd/cgo
GO-2022-0476: Arbitrary code execution via the go command with cgo in cmd/go
GO-2023-1839: Code injection via go command with cgo in cmd/go
GO-2023-1841: Improper handling of non-optional LDFLAGS in go command with cgo in cmd/go
GO-2023-1842: Improper sanitization of LDFLAGS with embedded spaces in go command with cgo in cmd/go
GO-2023-2095: Arbitrary code execution during build via line directives in cmd/go
GO-2023-2383: Command 'go get' may unexpectedly fallback to insecure git in cmd/go
GO-2024-2825: Arbitrary code execution during build on Darwin in cmd/go
GO-2024-2962: Output of "go env" does not sanitize values in cmd/go
GO-2025-3828: Unexpected command execution in untrusted VCS repositories in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Dec 3, 2015 GO-2021-0068 +18 more
GO-2021-0068: Arbitrary code injection via the go command with cgo on Windows in cmd/go
GO-2022-0177: Remote command execution via "go get" in cmd/go
GO-2022-0201: Remote command execution via "go get" command with cgo in cmd/go
GO-2022-0203: Remote command execution via "go get" command with "-insecure" option in cmd/go
GO-2022-0475: Arbitrary code execution in go command with cgo in cmd/go and cmd/cgo
GO-2022-0476: Arbitrary code execution via the go command with cgo in cmd/go
GO-2023-1839: Code injection via go command with cgo in cmd/go
GO-2023-1841: Improper handling of non-optional LDFLAGS in go command with cgo in cmd/go
GO-2023-1842: Improper sanitization of LDFLAGS with embedded spaces in go command with cgo in cmd/go
GO-2023-2095: Arbitrary code execution during build via line directives in cmd/go
GO-2023-2383: Command 'go get' may unexpectedly fallback to insecure git in cmd/go
GO-2024-2825: Arbitrary code execution during build on Darwin in cmd/go
GO-2024-2962: Output of "go env" does not sanitize values in cmd/go
GO-2025-3828: Unexpected command execution in untrusted VCS repositories in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Sep 9, 2015 GO-2021-0068 +18 more
GO-2021-0068: Arbitrary code injection via the go command with cgo on Windows in cmd/go
GO-2022-0177: Remote command execution via "go get" in cmd/go
GO-2022-0201: Remote command execution via "go get" command with cgo in cmd/go
GO-2022-0203: Remote command execution via "go get" command with "-insecure" option in cmd/go
GO-2022-0475: Arbitrary code execution in go command with cgo in cmd/go and cmd/cgo
GO-2022-0476: Arbitrary code execution via the go command with cgo in cmd/go
GO-2023-1839: Code injection via go command with cgo in cmd/go
GO-2023-1841: Improper handling of non-optional LDFLAGS in go command with cgo in cmd/go
GO-2023-1842: Improper sanitization of LDFLAGS with embedded spaces in go command with cgo in cmd/go
GO-2023-2095: Arbitrary code execution during build via line directives in cmd/go
GO-2023-2383: Command 'go get' may unexpectedly fallback to insecure git in cmd/go
GO-2024-2825: Arbitrary code execution during build on Darwin in cmd/go
GO-2024-2962: Output of "go env" does not sanitize values in cmd/go
GO-2025-3828: Unexpected command execution in untrusted VCS repositories in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Aug 19, 2015 GO-2021-0068 +18 more
GO-2021-0068: Arbitrary code injection via the go command with cgo on Windows in cmd/go
GO-2022-0177: Remote command execution via "go get" in cmd/go
GO-2022-0201: Remote command execution via "go get" command with cgo in cmd/go
GO-2022-0203: Remote command execution via "go get" command with "-insecure" option in cmd/go
GO-2022-0475: Arbitrary code execution in go command with cgo in cmd/go and cmd/cgo
GO-2022-0476: Arbitrary code execution via the go command with cgo in cmd/go
GO-2023-1839: Code injection via go command with cgo in cmd/go
GO-2023-1841: Improper handling of non-optional LDFLAGS in go command with cgo in cmd/go
GO-2023-1842: Improper sanitization of LDFLAGS with embedded spaces in go command with cgo in cmd/go
GO-2023-2095: Arbitrary code execution during build via line directives in cmd/go
GO-2023-2383: Command 'go get' may unexpectedly fallback to insecure git in cmd/go
GO-2024-2825: Arbitrary code execution during build on Darwin in cmd/go
GO-2024-2962: Output of "go env" does not sanitize values in cmd/go
GO-2025-3828: Unexpected command execution in untrusted VCS repositories in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Aug 6, 2015 GO-2021-0068 +18 more
GO-2021-0068: Arbitrary code injection via the go command with cgo on Windows in cmd/go
GO-2022-0177: Remote command execution via "go get" in cmd/go
GO-2022-0201: Remote command execution via "go get" command with cgo in cmd/go
GO-2022-0203: Remote command execution via "go get" command with "-insecure" option in cmd/go
GO-2022-0475: Arbitrary code execution in go command with cgo in cmd/go and cmd/cgo
GO-2022-0476: Arbitrary code execution via the go command with cgo in cmd/go
GO-2023-1839: Code injection via go command with cgo in cmd/go
GO-2023-1841: Improper handling of non-optional LDFLAGS in go command with cgo in cmd/go
GO-2023-1842: Improper sanitization of LDFLAGS with embedded spaces in go command with cgo in cmd/go
GO-2023-2095: Arbitrary code execution during build via line directives in cmd/go
GO-2023-2383: Command 'go get' may unexpectedly fallback to insecure git in cmd/go
GO-2024-2825: Arbitrary code execution during build on Darwin in cmd/go
GO-2024-2962: Output of "go env" does not sanitize values in cmd/go
GO-2025-3828: Unexpected command execution in untrusted VCS repositories in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Jul 29, 2015 GO-2021-0068 +18 more
GO-2021-0068: Arbitrary code injection via the go command with cgo on Windows in cmd/go
GO-2022-0177: Remote command execution via "go get" in cmd/go
GO-2022-0201: Remote command execution via "go get" command with cgo in cmd/go
GO-2022-0203: Remote command execution via "go get" command with "-insecure" option in cmd/go
GO-2022-0475: Arbitrary code execution in go command with cgo in cmd/go and cmd/cgo
GO-2022-0476: Arbitrary code execution via the go command with cgo in cmd/go
GO-2023-1839: Code injection via go command with cgo in cmd/go
GO-2023-1841: Improper handling of non-optional LDFLAGS in go command with cgo in cmd/go
GO-2023-1842: Improper sanitization of LDFLAGS with embedded spaces in go command with cgo in cmd/go
GO-2023-2095: Arbitrary code execution during build via line directives in cmd/go
GO-2023-2383: Command 'go get' may unexpectedly fallback to insecure git in cmd/go
GO-2024-2825: Arbitrary code execution during build on Darwin in cmd/go
GO-2024-2962: Output of "go env" does not sanitize values in cmd/go
GO-2025-3828: Unexpected command execution in untrusted VCS repositories in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Jul 17, 2015 GO-2021-0068 +18 more
GO-2021-0068: Arbitrary code injection via the go command with cgo on Windows in cmd/go
GO-2022-0177: Remote command execution via "go get" in cmd/go
GO-2022-0201: Remote command execution via "go get" command with cgo in cmd/go
GO-2022-0203: Remote command execution via "go get" command with "-insecure" option in cmd/go
GO-2022-0475: Arbitrary code execution in go command with cgo in cmd/go and cmd/cgo
GO-2022-0476: Arbitrary code execution via the go command with cgo in cmd/go
GO-2023-1839: Code injection via go command with cgo in cmd/go
GO-2023-1841: Improper handling of non-optional LDFLAGS in go command with cgo in cmd/go
GO-2023-1842: Improper sanitization of LDFLAGS with embedded spaces in go command with cgo in cmd/go
GO-2023-2095: Arbitrary code execution during build via line directives in cmd/go
GO-2023-2383: Command 'go get' may unexpectedly fallback to insecure git in cmd/go
GO-2024-2825: Arbitrary code execution during build on Darwin in cmd/go
GO-2024-2962: Output of "go env" does not sanitize values in cmd/go
GO-2025-3828: Unexpected command execution in untrusted VCS repositories in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Jul 7, 2015 GO-2021-0068 +18 more
GO-2021-0068: Arbitrary code injection via the go command with cgo on Windows in cmd/go
GO-2022-0177: Remote command execution via "go get" in cmd/go
GO-2022-0201: Remote command execution via "go get" command with cgo in cmd/go
GO-2022-0203: Remote command execution via "go get" command with "-insecure" option in cmd/go
GO-2022-0475: Arbitrary code execution in go command with cgo in cmd/go and cmd/cgo
GO-2022-0476: Arbitrary code execution via the go command with cgo in cmd/go
GO-2023-1839: Code injection via go command with cgo in cmd/go
GO-2023-1841: Improper handling of non-optional LDFLAGS in go command with cgo in cmd/go
GO-2023-1842: Improper sanitization of LDFLAGS with embedded spaces in go command with cgo in cmd/go
GO-2023-2095: Arbitrary code execution during build via line directives in cmd/go
GO-2023-2383: Command 'go get' may unexpectedly fallback to insecure git in cmd/go
GO-2024-2825: Arbitrary code execution during build on Darwin in cmd/go
GO-2024-2962: Output of "go env" does not sanitize values in cmd/go
GO-2025-3828: Unexpected command execution in untrusted VCS repositories in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Sep 23, 2015 GO-2021-0068 +18 more
GO-2021-0068: Arbitrary code injection via the go command with cgo on Windows in cmd/go
GO-2022-0177: Remote command execution via "go get" in cmd/go
GO-2022-0201: Remote command execution via "go get" command with cgo in cmd/go
GO-2022-0203: Remote command execution via "go get" command with "-insecure" option in cmd/go
GO-2022-0475: Arbitrary code execution in go command with cgo in cmd/go and cmd/cgo
GO-2022-0476: Arbitrary code execution via the go command with cgo in cmd/go
GO-2023-1839: Code injection via go command with cgo in cmd/go
GO-2023-1841: Improper handling of non-optional LDFLAGS in go command with cgo in cmd/go
GO-2023-1842: Improper sanitization of LDFLAGS with embedded spaces in go command with cgo in cmd/go
GO-2023-2095: Arbitrary code execution during build via line directives in cmd/go
GO-2023-2383: Command 'go get' may unexpectedly fallback to insecure git in cmd/go
GO-2024-2825: Arbitrary code execution during build on Darwin in cmd/go
GO-2024-2962: Output of "go env" does not sanitize values in cmd/go
GO-2025-3828: Unexpected command execution in untrusted VCS repositories in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Feb 18, 2015 GO-2021-0068 +18 more
GO-2021-0068: Arbitrary code injection via the go command with cgo on Windows in cmd/go
GO-2022-0177: Remote command execution via "go get" in cmd/go
GO-2022-0201: Remote command execution via "go get" command with cgo in cmd/go
GO-2022-0203: Remote command execution via "go get" command with "-insecure" option in cmd/go
GO-2022-0475: Arbitrary code execution in go command with cgo in cmd/go and cmd/cgo
GO-2022-0476: Arbitrary code execution via the go command with cgo in cmd/go
GO-2023-1839: Code injection via go command with cgo in cmd/go
GO-2023-1841: Improper handling of non-optional LDFLAGS in go command with cgo in cmd/go
GO-2023-1842: Improper sanitization of LDFLAGS with embedded spaces in go command with cgo in cmd/go
GO-2023-2095: Arbitrary code execution during build via line directives in cmd/go
GO-2023-2383: Command 'go get' may unexpectedly fallback to insecure git in cmd/go
GO-2024-2825: Arbitrary code execution during build on Darwin in cmd/go
GO-2024-2962: Output of "go env" does not sanitize values in cmd/go
GO-2025-3828: Unexpected command execution in untrusted VCS repositories in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Jan 15, 2015 GO-2021-0068 +18 more
GO-2021-0068: Arbitrary code injection via the go command with cgo on Windows in cmd/go
GO-2022-0177: Remote command execution via "go get" in cmd/go
GO-2022-0201: Remote command execution via "go get" command with cgo in cmd/go
GO-2022-0203: Remote command execution via "go get" command with "-insecure" option in cmd/go
GO-2022-0475: Arbitrary code execution in go command with cgo in cmd/go and cmd/cgo
GO-2022-0476: Arbitrary code execution via the go command with cgo in cmd/go
GO-2023-1839: Code injection via go command with cgo in cmd/go
GO-2023-1841: Improper handling of non-optional LDFLAGS in go command with cgo in cmd/go
GO-2023-1842: Improper sanitization of LDFLAGS with embedded spaces in go command with cgo in cmd/go
GO-2023-2095: Arbitrary code execution during build via line directives in cmd/go
GO-2023-2383: Command 'go get' may unexpectedly fallback to insecure git in cmd/go
GO-2024-2825: Arbitrary code execution during build on Darwin in cmd/go
GO-2024-2962: Output of "go env" does not sanitize values in cmd/go
GO-2025-3828: Unexpected command execution in untrusted VCS repositories in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Dec 11, 2014 GO-2021-0068 +18 more
GO-2021-0068: Arbitrary code injection via the go command with cgo on Windows in cmd/go
GO-2022-0177: Remote command execution via "go get" in cmd/go
GO-2022-0201: Remote command execution via "go get" command with cgo in cmd/go
GO-2022-0203: Remote command execution via "go get" command with "-insecure" option in cmd/go
GO-2022-0475: Arbitrary code execution in go command with cgo in cmd/go and cmd/cgo
GO-2022-0476: Arbitrary code execution via the go command with cgo in cmd/go
GO-2023-1839: Code injection via go command with cgo in cmd/go
GO-2023-1841: Improper handling of non-optional LDFLAGS in go command with cgo in cmd/go
GO-2023-1842: Improper sanitization of LDFLAGS with embedded spaces in go command with cgo in cmd/go
GO-2023-2095: Arbitrary code execution during build via line directives in cmd/go
GO-2023-2383: Command 'go get' may unexpectedly fallback to insecure git in cmd/go
GO-2024-2825: Arbitrary code execution during build on Darwin in cmd/go
GO-2024-2962: Output of "go env" does not sanitize values in cmd/go
GO-2025-3828: Unexpected command execution in untrusted VCS repositories in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Dec 2, 2014 GO-2021-0068 +18 more
GO-2021-0068: Arbitrary code injection via the go command with cgo on Windows in cmd/go
GO-2022-0177: Remote command execution via "go get" in cmd/go
GO-2022-0201: Remote command execution via "go get" command with cgo in cmd/go
GO-2022-0203: Remote command execution via "go get" command with "-insecure" option in cmd/go
GO-2022-0475: Arbitrary code execution in go command with cgo in cmd/go and cmd/cgo
GO-2022-0476: Arbitrary code execution via the go command with cgo in cmd/go
GO-2023-1839: Code injection via go command with cgo in cmd/go
GO-2023-1841: Improper handling of non-optional LDFLAGS in go command with cgo in cmd/go
GO-2023-1842: Improper sanitization of LDFLAGS with embedded spaces in go command with cgo in cmd/go
GO-2023-2095: Arbitrary code execution during build via line directives in cmd/go
GO-2023-2383: Command 'go get' may unexpectedly fallback to insecure git in cmd/go
GO-2024-2825: Arbitrary code execution during build on Darwin in cmd/go
GO-2024-2962: Output of "go env" does not sanitize values in cmd/go
GO-2025-3828: Unexpected command execution in untrusted VCS repositories in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Nov 17, 2014 GO-2021-0068 +18 more
GO-2021-0068: Arbitrary code injection via the go command with cgo on Windows in cmd/go
GO-2022-0177: Remote command execution via "go get" in cmd/go
GO-2022-0201: Remote command execution via "go get" command with cgo in cmd/go
GO-2022-0203: Remote command execution via "go get" command with "-insecure" option in cmd/go
GO-2022-0475: Arbitrary code execution in go command with cgo in cmd/go and cmd/cgo
GO-2022-0476: Arbitrary code execution via the go command with cgo in cmd/go
GO-2023-1839: Code injection via go command with cgo in cmd/go
GO-2023-1841: Improper handling of non-optional LDFLAGS in go command with cgo in cmd/go
GO-2023-1842: Improper sanitization of LDFLAGS with embedded spaces in go command with cgo in cmd/go
GO-2023-2095: Arbitrary code execution during build via line directives in cmd/go
GO-2023-2383: Command 'go get' may unexpectedly fallback to insecure git in cmd/go
GO-2024-2825: Arbitrary code execution during build on Darwin in cmd/go
GO-2024-2962: Output of "go env" does not sanitize values in cmd/go
GO-2025-3828: Unexpected command execution in untrusted VCS repositories in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go
Oct 30, 2014 GO-2021-0068 +18 more
GO-2021-0068: Arbitrary code injection via the go command with cgo on Windows in cmd/go
GO-2022-0177: Remote command execution via "go get" in cmd/go
GO-2022-0201: Remote command execution via "go get" command with cgo in cmd/go
GO-2022-0203: Remote command execution via "go get" command with "-insecure" option in cmd/go
GO-2022-0475: Arbitrary code execution in go command with cgo in cmd/go and cmd/cgo
GO-2022-0476: Arbitrary code execution via the go command with cgo in cmd/go
GO-2023-1839: Code injection via go command with cgo in cmd/go
GO-2023-1841: Improper handling of non-optional LDFLAGS in go command with cgo in cmd/go
GO-2023-1842: Improper sanitization of LDFLAGS with embedded spaces in go command with cgo in cmd/go
GO-2023-2095: Arbitrary code execution during build via line directives in cmd/go
GO-2023-2383: Command 'go get' may unexpectedly fallback to insecure git in cmd/go
GO-2024-2825: Arbitrary code execution during build on Darwin in cmd/go
GO-2024-2962: Output of "go env" does not sanitize values in cmd/go
GO-2025-3828: Unexpected command execution in untrusted VCS repositories in cmd/go
GO-2026-4339: Arbitrary file write using cgo pkg-config directive in cmd/go
GO-2026-4871: Code execution vulnerability in SWIG code generation in cmd/go
GO-2026-4978: Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
GO-2026-4979: Invoking "go tool pack" does not sanitize output paths in cmd/go
GO-2026-4984: Malicious module proxy can bypass checksum database in cmd/go