Package impact

golang Go / toolchain

0
KEVHas exploit
Reset
CVE Severity CVSS Risk Flags OS Vendor Published Description
CVE-2017-15041 critical 9.8 9.8 9y ago Remote command execution via "go get" in cmd/go
CVE-2023-29402 critical 9.5 3y ago RHSA-2023:3922: go-toolset:rhel8 security update (Critical)
CVE-2023-29404 critical 9.5 3y ago RHSA-2023:3922: go-toolset:rhel8 security update (Critical)
CVE-2023-29405 critical 9.5 3y ago RHSA-2023:3922: go-toolset:rhel8 security update (Critical)
CVE-2026-27140 high 8.0 1mo ago RHSA-2026:10704: go-toolset:rhel8 security update (Important)
CVE-2026-27144 high 8.0 1mo ago RHSA-2026:10704: go-toolset:rhel8 security update (Important)
CVE-2026-27143 high 8.0 1mo ago RHSA-2026:10704: go-toolset:rhel8 security update (Important)
CVE-2025-61731 high 8.0 2mo ago RHSA-2026:6949: go-toolset:rhel8 security update (Important)
CVE-2025-61732 high 8.0 3mo ago RHSA-2026:2708: go-toolset:rhel8 security update (Important)
CVE-2025-4674 high 8.0 10mo ago RHSA-2025:13940: go-toolset:rhel8 security update (Important)
CVE-2018-6574 high 8.0 4y ago Remote command execution via "go get" command with cgo in cmd/go
CVE-2018-16873 high 8.0 4y ago Remote command execution via "go get" with "-u" flag in cmd/go
CVE-2018-16874 high 8.0 4y ago Directory traversal via "go get" command in cmd/go
CVE-2026-42501 high 7.5 7.5 22d ago A malicious module proxy can exploit a flaw in the go command's validation of module checksums to bypass checksum database validation. This vulnerability affects any user using an untrusted module pr…