Known vulnerabilities in Go toolchain cmd/go
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2023-24531 | Command go env is documented as outputting a shell script containing the Go environment | 9.8 Critical | Jul 2, 2024 |
| CVE-2023-29405 | The go command may execute arbitrary code at build time when using cgo | 9.8 Critical | Jun 8, 2023 |
| CVE-2023-29404 | The go command may execute arbitrary code at build time when using cgo | 9.8 Critical | Jun 8, 2023 |
| CVE-2023-29402 | The go command may generate unexpected code at build time when using cgo | 9.8 Critical | Jun 8, 2023 |