Skip to content
OpenAdvisories

Package · Debian

gopls

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.8
    CVE-2026-42503

    Accidental binding to INADDR_ANY might lead to RCE in golang.org/x/tools/gopls

    gopls by default communicates via pipe. However, -port and -listen flags are supported as means of debugging. If -listen is given a value without an explicit host (e.g. :8080), or -port is used, gopls will listen on 0.0.0.0.  As a result, users might inadvert…

    golang.org/x/tools golang.org/x/tools/gopls gopls gopls Debian Ubuntu