Vulnerabilities in Go toolchain

22 results
CVE-2026-39819MEDIUMInvoking "go bug" follows symlinks in predictable temporary filenames in cmd/goEPSS 0.2%CVE-2026-39817MEDIUMInvoking "go tool pack" does not sanitize output paths in cmd/goEPSS 0.2%