| Checksum database bypass for golang.org/toolchain in cmd/goCVE-2026-94447 · GO-2026-6602 |
toolchainExploit Intelligence/exploit-intelligence/vulnerability-analysis-rhel9 |
GoRed Hat |
Medium
|
Fix reported |
|
| Checksum bypass for golang.org/fips140 in cmd/goCVE-2026-94444 · GO-2026-6601 |
toolchainExploit Intelligence/exploit-intelligence/vulnerability-analysis-rhel9 |
GoRed Hat |
Medium
|
Fix reported |
|
| Invoking "go tool pack" does not sanitize output paths in cmd/goCVE-2026-39817 · GO-2026-4979 |
toolchainRed Hat Hardened Images/golang1.25 |
GoRed Hat |
Medium
|
Fix reported |
|
| Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/goCVE-2026-39819 · GO-2026-4978 |
toolchainRed Hat Hardened Images/golang1.25 |
GoRed Hat |
Medium
|
Fix reported |
|
| Malicious module proxy can bypass checksum database in cmd/goCVE-2026-42501 · GO-2026-4984 |
toolchainExploit Intelligence/exploit-intelligence-tech-preview/vulnerability-analysis-rhel9 |
GoRed Hat |
Medium
|
Fix reported |
|
| Ignore unrelated, unauthenticated hashes in Lookup in golang.org/x/mod/sumdbCVE-2026-56864 · GO-2026-6180 |
golang.org/x/modtoolchain |
GoRed Hat |
High
|
Fix reported |
|
| Fix transparency log tile verification bypass in golang.org/x/mod/sumdb/tlogCVE-2026-56865 · GO-2026-6179 |
golang.org/x/modtoolchain |
GoRed Hat |
High
|
Fix reported |
|
| Arbitrary file write using cgo pkg-config directive in cmd/goCVE-2025-61731 · GO-2026-4339 |
toolchainOpenShift Service Mesh 2/openshift-golang-builder-container |
GoRed Hat |
High
|
Fix reported |
|
| Miscompilation allows memory corruption via CONVNOP-wrapped array copy in cmd/compileCVE-2026-27144 · GO-2026-4867 |
toolchainOpenShift Service Mesh 2/openshift-service-mesh/proxyv2-rhel9 |
GoRed Hat |
Medium
|
Fix reported |
|
| Missing bound checks can lead to memory corruption in safe Go in cmd/compileCVE-2026-27143 · GO-2026-4868 |
toolchainOpenShift Service Mesh 2/openshift-service-mesh/proxyv2-rhel9 |
GoRed Hat |
Medium
|
Fix reported |
|
| Potential code smuggling via doc comments in cmd/cgoCVE-2025-61732 · GO-2026-4433 |
toolchainExploit Intelligence/exploit-intelligence/vulnerability-analysis-rhel9 |
GoRed Hat |
High
|
Fix reported |
|
| Unexpected code execution when invoking toolchain in cmd/goCVE-2025-68119 · GO-2026-4338 |
toolchainRed Hat Enterprise Linux 10/golang |
GoRed Hat |
Medium
|
Fix reported |
|
| Code execution vulnerability in SWIG code generation in cmd/goCVE-2026-27140 · GO-2026-4871 |
toolchainRed Hat Enterprise Linux 8/golang |
GoRed Hat |
High
|
Fix reported |
|
| Code injection via go command with cgo in cmd/goCVE-2023-29402 · GO-2023-1839 |
toolchainRed Hat Ceph Storage 3/golang |
GoRed Hat |
Medium
|
Fix reported |
|
| Output of "go env" does not sanitize values in cmd/goCVE-2023-24531 · GO-2024-2962 |
toolchain |
Go |
Unknown
|
Fix reported |
|
| Unexpected command execution in untrusted VCS repositories in cmd/goCVE-2025-4674 · GO-2025-3828 |
toolchain |
Go |
Unknown
|
Fix reported |
|
| Improper handling of non-optional LDFLAGS in go command with cgo in cmd/goCVE-2023-29404 · GO-2023-1841 |
toolchainRed Hat Ceph Storage 3/golang |
GoRed Hat |
High
|
Fix reported |
|
| Arbitrary code execution via go.mod toolchain directive in cmd/goCVE-2023-39320 · GO-2023-2042 |
toolchain |
Go |
Unknown
|
Fix reported |
|
| Arbitrary code execution during build on Darwin in cmd/goCVE-2024-24787 · GO-2024-2825 |
toolchain |
Go |
Unknown
|
Fix reported |
|
| Command 'go get' may unexpectedly fallback to insecure git in cmd/goCVE-2023-45285 · GO-2023-2383 |
toolchainRed Hat OpenShift Virtualization 4/openshift-golang-builder-container |
GoRed Hat |
Medium
|
Fix reported |
|
