Skip to contentGo Toolchain Cmd/cgo vulnerabilities
- go toolchain cmd/cgo, cmd/compile, cmd/link +2 moreLinker flag injection via cgo_import_dynamic and PE DLL names in cmd/cgo, cmd/compile, and cmd/linkCVE-2026-97042Fix availableNo score
- go toolchain cmd/cgo, golang go, red hat enterprise linux 10 +31 more +33 morePotential code smuggling via doc comments in cmd/cgoCVE-2025-61732Fix available8.6 High
- go toolchain cmd/go, golang go, fedoraproject fedora +1 more +3 moreImproper sanitization of LDFLAGS with embedded spaces in go command with cgo in cmd/goCVE-2023-29405Fix available9.8 Critical
- go toolchain cmd/cgo, cmd/go, golang go +3 more +5 moreArbitrary code execution in go command with cgo in cmd/go and cmd/cgoCVE-2020-28366Fix available7.5 High