Arbitrary code injection via the go command with cgo on Windows in cmd/go
Modified: 5/20/2024
package
pkg:go/toolchain
Arbitrary code injection via the go command with cgo on Windows in cmd/go
Modified: 5/20/2024
Remote command execution via "go get" in cmd/go
Modified: 5/20/2024
Remote command execution via "go get" with "-u" flag in cmd/go
Modified: 5/20/2024
Directory traversal via "go get" command in cmd/go
Modified: 5/20/2024
Remote command execution via "go get" command with cgo in cmd/go
Modified: 5/20/2024
Remote command execution via "go get" command with "-insecure" option in cmd/go
Modified: 5/20/2024
Buffer overflow in WASM modules in misc/wasm and cmd/link
Modified: 5/20/2024
Incorrect access control in the go command in cmd/go/internal/modfetch
Modified: 5/20/2024
Arbitrary code execution in go command with cgo in cmd/go and cmd/cgo
Modified: 5/20/2024
Arbitrary code execution via the go command with cgo in cmd/go
Modified: 5/20/2024
Code injection via go command with cgo in cmd/go
Modified: 2/4/2026
Improper handling of non-optional LDFLAGS in go command with cgo in cmd/go
Modified: 2/4/2026
Improper sanitization of LDFLAGS with embedded spaces in go command with cgo in cmd/go
Modified: 2/4/2026
Arbitrary code execution via go.mod toolchain directive in cmd/go
Modified: 2/4/2026
Arbitrary code execution during build via line directives in cmd/go
Modified: 2/4/2026
Command 'go get' may unexpectedly fallback to insecure git in cmd/go
Modified: 2/4/2026
Arbitrary code execution during build on Darwin in cmd/go
Modified: 2/4/2026
Output of "go env" does not sanitize values in cmd/go
Modified: 2/4/2026
GOAUTH credential leak in cmd/go
Modified: 1/30/2025
Arbitrary code execution during build on darwin in cmd/go
Modified: 2/8/2025
Unexpected command execution in untrusted VCS repositories in cmd/go
Modified: 2/4/2026
Unexpected code execution when invoking toolchain in cmd/go
Modified: 5/15/2026
Arbitrary file write using cgo pkg-config directive in cmd/go
Modified: 8/5/2026
Potential code smuggling via doc comments in cmd/cgo
Modified: 5/15/2026
Miscompilation allows memory corruption via CONVNOP-wrapped array copy in cmd/compile
Modified: 7/30/2026
Missing bound checks can lead to memory corruption in safe Go in cmd/compile
Modified: 7/30/2026
Code execution vulnerability in SWIG code generation in cmd/go
Modified: 5/13/2026
Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
Modified: 9/22/2026
Invoking "go tool pack" does not sanitize output paths in cmd/go
Modified: 9/22/2026
Malicious module proxy can bypass checksum database in cmd/go
Modified: 8/31/2026
Fix transparency log tile verification bypass in golang.org/x/mod/sumdb/tlog
Modified: 8/19/2026
Ignore unrelated, unauthenticated hashes in Lookup in golang.org/x/mod/sumdb
Modified: 8/19/2026