Skip to contentGo Standard Library Syscall vulnerabilities
- go standard library os, internal/syscall/windows +1 moreRoot.Mkdir(All) can follow junctions out of the root on Windows in osCVE-2026-56857Fix available9.8 Critical
- go standard library internal/syscall/unix, golang go +1 moreTOCTOU permits root escape on Linux via Root.Chmod in os in internal/syscall/unixCVE-2026-32282Fix available6.4 Medium
- go standard library os, syscall, golang go +2 moreInconsistent handling of O_CREATE|O_EXCL on Unix and Windows in os in syscallCVE-2025-0913Fix available5.5 Medium
- go standard library os/exec, syscall, golang go +2 moreUnsanitized NUL in environment variables on Windows in syscall and os/execCVE-2022-41716Fix available7.5 High