Skip to content

Vulnerabilities of golang Go

Is your version affected?

CVE Summary Score Published
CVE-2024-24789 The archive/zip package's handling of certain types of invalid zip files differs from the behavior of most zip… 5.3 Medium Jun 5, 2024
CVE-2024-24790 The various Is methods (IsPrivate, IsLoopback, etc) did not work as expected for IPv4-mapped IPv6 addresses, returning… 9.8 Critical Jun 5, 2024
CVE-2024-24787 On Darwin, building a Go module which contains CGO can trigger arbitrary code execution when using the Apple version… 6.4 Medium May 8, 2024
CVE-2023-45284 On Windows, The IsLocal function does not correctly detect reserved device names in some cases 5.3 Medium Nov 9, 2023
CVE-2020-29509 The encoding/xml package in Go (all versions) does not correctly preserve the semantics of attribute namespace… 9.8 Critical Dec 14, 2020
CVE-2020-29511 The encoding/xml package in Go (all versions) does not correctly preserve the semantics of element namespace prefixes… 9.8 Critical Dec 14, 2020
CVE-2020-29510 The encoding/xml package in Go versions 1.15 and earlier does not correctly preserve the semantics of directives… 9.8 Critical Dec 14, 2020

Other golang products