Skip to content
OpenAdvisories

Product · [UNKNOWN]

golang

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.5
    CVE-2018-16873 EPSS 66%

    Remote command execution via "go get" with "-u" flag in cmd/go

    In Go before 1.10.6 and 1.11.x before 1.11.3, the "go get" command is vulnerable to remote code execution when executed with the -u flag and the import path of a malicious Go package, or a package that imports it directly or indirectly. Specifically, it is on…

    [UNKNOWN] golang golang-1.8 golang-1.10 Ubuntu Go