Login Request a demo
CM
Product
cmd/go
by Go toolchain · last CVE Oct 8, 2026
15
CVEs
0
On KEV
9.8
Max CVSS
2
New 30D
Vulnerabilities15In the news0Timeline
Severity mix
Critical 1High 11Medium 3Low 0
Severity
All severities15Critical1High11Medium3Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add cmd/go to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2024-24787
6.4
1%
May 8
Arbitrary code execution during build on Darwin in cmd/go
Affected: before 1.21.10; 1.22.0-0 before 1.22.3
CVE-2026-39817
5.9
0%
May 7
Invoking "go tool pack" does not sanitize output paths in cmd/go
Affected: before 1.25.10; 1.26.0-0 before 1.26.3
CVE-2026-39819
5.3
0%
May 7
Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
Affected: before 1.25.10; 1.26.0-0 before 1.26.3
Showing 3