Product · Go standard library

syscall

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

Medium 5.5

CVE-2025-0913

Inconsistent handling of O_CREATE|O_EXCL on Unix and Windows in os in syscall

os.OpenFile(path, os.O_CREATE|O_EXCL) behaved differently on Unix and Windows systems when the target path was a dangling symlink. On Unix systems, OpenFile with O_CREATE and O_EXCL flags never follows symlinks. On Windows, when the target path was a symlink …

Go standard library os syscall katib-suggestion-hyperopt Ubuntu Azure Linux Alpine Wolfi Go

Jun 11, 2025
Medium 6.3

CVE-2022-41716

Unsanitized NUL in environment variables on Windows in syscall and os/exec

Due to unsanitized NUL values, attackers may be able to maliciously set environment variables on Windows. In syscall.StartProcess and os/exec.Cmd, invalid environment variable values containing NUL values are not properly checked for. A malicious environment …

Go standard library os/exec syscall katib-suggestion-hyperopt Debian Ubuntu Azure Linux Wolfi Go

Nov 2, 2022