| CVE-2026-56857 |
On Windows, when the target of Root.Mkdir or Root.MkdirAll is a junction pointing to an empty location, the operation…
|
9.8
Critical
|
Oct 8, 2026 |
| CVE-2026-39822 |
On Unix systems, opening a file in an os.Root improperly follows symlinks to locations outside of the Root when the…
|
7.8
High
|
Jul 8, 2026 |
| CVE-2026-27139 |
On Unix platforms, when listing the contents of a directory using File.ReadDir or File.Readdir the returned FileInfo…
|
2.5
Low
|
Mar 6, 2026 |
| CVE-2025-22873 |
It was possible to improperly access the parent directory of an os.Root by opening a filename ending in "../"
|
3.8
Low
|
Feb 4, 2026 |
| CVE-2025-0913 |
os.OpenFile(path, os.O_CREATE|O_EXCL) behaved differently on Unix and Windows systems when the target path was a…
|
5.5
Medium
|
Jun 11, 2025 |
| CVE-2022-41720 |
On Windows, restricted files can be accessed via os.DirFS and http.Dir
|
7.5
High
|
Dec 7, 2022 |