Skip to content

Vulnerabilities of Go standard library path/filepath

Is your version affected?

CVE Summary Score Published
CVE-2024-8244 The filepath.Walk and filepath.WalkDir functions are documented as not following symbolic links, but both functions… 3.7 Low Aug 6, 2025
CVE-2023-45284 On Windows, The IsLocal function does not correctly detect reserved device names in some cases 5.3 Medium Nov 9, 2023
CVE-2023-45283 The filepath package does not recognize paths with a \??\ prefix as special Not rated Nov 9, 2023
CVE-2022-41722 A path traversal vulnerability exists in filepath.Clean on Windows Not rated Feb 28, 2023
CVE-2022-30632 Uncontrolled recursion in Glob in path/filepath before Go 1.17.12 and Go 1.18.4 allows an attacker to cause a panic… Not rated Aug 9, 2022
CVE-2022-29804 Incorrect conversion of certain invalid paths to valid, absolute paths in Clean in path/filepath before Go 1.17.11 and… Not rated Aug 9, 2022

Other Go standard library products