Vulnerabilities of Go standard library os/exec
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2025-47906 | If the PATH environment variable contains paths which are executables (rather than just directories), passing certain… | 6.5 Medium | Sep 18, 2025 |
| CVE-2022-41716 | Due to unsanitized NUL values, attackers may be able to maliciously set environment variables on Windows | 6.3 Medium | Nov 2, 2022 |
| CVE-2022-30580 | Code injection in Cmd.Start in os/exec before Go 1.17.11 and Go 1.18.3 allows execution of any binaries in the working… | 7.8 High | Aug 9, 2022 |