CM
Product
cmd/go
11
CVEs
0
On KEV
8.8
Max CVSS
2
New 30D
Severity mix
Critical 0High 9Medium 2Low 0
Watch
Add cmd/go to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-39817 | 5.9 | May 7 | Invoking "go tool pack" does not sanitize output paths in cmd/go Affected: before 1.25.10; 1.26.0-0 before 1.26.3 |
| CVE-2026-39819 | 5.3 | May 7 | Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go Affected: before 1.25.10; 1.26.0-0 before 1.26.3 |
Showing 2