Skip to content
OpenAdvisories

Package · Alpine

go1.10

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Unscored —
    CVE-2018-6574 Public exploit

    Remote command execution via "go get" command with cgo in cmd/go

    Go before 1.8.7, Go 1.9.x before 1.9.4, and Go 1.10 pre-releases before Go 1.10rc2 allow "go get" remote command execution during source code build, by leveraging the gcc or clang plugin feature, because -fplugin= and -plugin= arguments were not blocked.

    go golang-1.8 golang-1.6 toolchain Ubuntu Alpine Go