| CVE-2026-56857 |
On Windows, when the target of Root.Mkdir or Root.MkdirAll is a junction pointing to an empty location, the operation…
|
9.8
Critique
|
8 oct. 2026 |
| CVE-2026-39822 |
On Unix systems, opening a file in an os.Root improperly follows symlinks to locations outside of the Root when the…
|
7.8
Élevée
|
8 juil. 2026 |
| CVE-2026-27139 |
On Unix platforms, when listing the contents of a directory using File.ReadDir or File.Readdir the returned FileInfo…
|
2.5
Faible
|
6 mars 2026 |
| CVE-2025-22873 |
It was possible to improperly access the parent directory of an os.Root by opening a filename ending in "../"
|
3.8
Faible
|
4 févr. 2026 |
| CVE-2025-0913 |
os.OpenFile(path, os.O_CREATE|O_EXCL) behaved differently on Unix and Windows systems when the target path was a…
|
5.5
Moyenne
|
11 juin 2025 |
| CVE-2022-41720 |
On Windows, restricted files can be accessed via os.DirFS and http.Dir
|
7.5
Élevée
|
7 déc. 2022 |