Product · Go toolchain

cmd/cgo

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

Critical 9.8

CVE-2023-29405

Improper sanitization of LDFLAGS with embedded spaces in go command with cgo in cmd/go

The go command may execute arbitrary code at build time when using cgo. This may occur when running "go get" on a malicious module, or when running any other command which builds untrusted code. This is can by triggered by linker flags, specified via a "#cgo …

Go toolchain cmd/go cmd/cgo katib-suggestion-hyperopt Debian Ubuntu Azure Linux Alpine Wolfi Go

Jun 8, 2023