Skip to contentGo Standard Library Os vulnerabilities
- go standard library os, internal/syscall/windows +1 moreRoot.Mkdir(All) can follow junctions out of the root on Windows in osCVE-2026-56857Fix available9.8 Critical
- go standard library os, golang go +1 moreRoot escape via symlink plus trailing slash in osCVE-2026-39822Fix available7.8 High
- go standard library os, golang go +1 moreFileInfo can escape from a Root in osCVE-2026-27139Fix available2.5 Low
- go standard library os/exec, golang go +1 moreUnexpected paths returned from LookPath in os/execCVE-2025-47906Fix available6.5 Medium
- go standard library osIGEL OS Secure Terminal and Secure Shadow Remote Code ExecutionCVE-2025-34082Public exploit9.3 Critical
- go standard library os, syscall, golang go +2 moreInconsistent handling of O_CREATE|O_EXCL on Unix and Windows in os in syscallCVE-2025-0913Fix available5.5 Medium
- go standard library os, golang go +1 moreImproper access to parent directory of root in osCVE-2025-22873Fix available3.8 Low
- go standard library net/http, os, golang go +2 moreRestricted file access on Windows in os and net/httpCVE-2022-41720Fix available7.5 High
- go standard library os/exec, syscall, golang go +2 moreUnsanitized NUL in environment variables on Windows in syscall and os/execCVE-2022-41716Fix available7.5 High
- go standard library os/exec, golang go +1 moreEmpty Cmd.Path can trigger unintended binary in os/exec on WindowsCVE-2022-30580Fix available7.8 High