Go to main page
Versions in this module
go1
Jan 10, 2023 GO-2023-1839GO-2023-1841GO-2023-1842GO-2023-2095GO-2023-2383GO-2024-2825GO-2024-2962
GO-2023-1839: Code injection via go command with cgo in cmd/go
GO-2023-1841: Improper handling of non-optional LDFLAGS in go command with cgo in cmd/go
GO-2023-1842: Improper sanitization of LDFLAGS with embedded spaces in go command with cgo in cmd/go
GO-2023-2095: Arbitrary code execution during build via line directives in cmd/go
GO-2023-2383: Command 'go get' may unexpectedly fallback to insecure git in cmd/go
GO-2024-2825: Arbitrary code execution during build on Darwin in cmd/go
GO-2024-2962: Output of "go env" does not sanitize values in cmd/go