Skip to content
OpenAdvisories

Vendor

Go toolchain

37 known vulnerabilities.

Products

cmd/go 32 cmd/compile 5 cmd/cgo 4 cmd/link 3
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.4
    CVE-2024-24787 Public exploit

    Arbitrary code execution during build on Darwin in cmd/go

    On Darwin, building a Go module which contains CGO can trigger arbitrary code execution when using the Apple version of ld, due to usage of the -lto_library flag in a "#cgo LDFLAGS" directive.

    Go toolchain cmd/go katib-suggestion-hyperopt katib-earlystopping Azure Linux Wolfi Go
  • Unscored —
    CVE-2023-39320 Public exploit

    Arbitrary code execution via go.mod toolchain directive in cmd/go

    The go.mod toolchain directive, introduced in Go 1.21, can be leveraged to execute scripts and binaries relative to the root of the module when the "go" command was executed within the module. This applies to modules downloaded using the "go" command from the…

    Go toolchain cmd/go go metrics-server Alpine Wolfi Go