Login Request a demo
CM
Product
cmd/compile
by Go toolchain · last CVE Apr 8, 2026
2
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities2In the news0Timeline
Severity mix
Critical 1High 1Medium 0Low 0
Severity
All severities2Critical1High1Medium0Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add cmd/compile to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-27143
9.8
1%
Apr 8
Missing bound checks can lead to memory corruption in safe Go in cmd/compile
Affected: before 1.25.9; 1.26.0-0 before 1.26.2
CVE-2026-27144
7.1
0%
Apr 8
Miscompilation allows memory corruption via CONVNOP-wrapped array copy in cmd/compile
Affected: before 1.25.9; 1.26.0-0 before 1.26.2
Showing 2