Product · Go standard library

internal/syscall/windows

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

Critical 9.8

CVE-2026-56857

Root.Mkdir(All) can follow junctions out of the root on Windows in os

On Windows, when the target of Root.Mkdir or Root.MkdirAll is a junction pointing to an empty location, the operation can create a directory at the junction target even when that target is located outside the root. This only applies to operations where the la…

Go standard library os internal/syscall/windows golang Windows Ubuntu Azure Linux Alpine Wolfi Go

Oct 8, 2026