Skip to content
OpenAdvisories

Product · Go standard library

path/filepath

6 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Low 3.7
    CVE-2024-8244

    Walk/WalkDir in path/filepath susceptible to symlink race

    The filepath.Walk and filepath.WalkDir functions are documented as not following symbolic links, but both functions are susceptible to a TOCTOU (time of check/time of use) race condition where a portion of the path being walked is replaced with a symbolic lin…

    Go standard library path/filepath golang-1.13 golang-1.19 Debian Ubuntu