Количество 15
Количество 15
GHSA-qc64-m6c2-v4x7
The "go tool pack" subcommand (usually used only by the compiler as an internal tool with known-good inputs) does not sanitize output filenames. Extracting a malicious archive file with the "pack" subcommand can write files to arbitrary locations on the filesystem.
CVE-2026-39817
The "go tool pack" subcommand (usually used only by the compiler as an internal tool with known-good inputs) does not sanitize output filenames. Extracting a malicious archive file with the "pack" subcommand can write files to arbitrary locations on the filesystem.
CVE-2026-39817
The "go tool pack" subcommand (usually used only by the compiler as an internal tool with known-good inputs) does not sanitize output filenames. Extracting a malicious archive file with the "pack" subcommand can write files to arbitrary locations on the filesystem.
CVE-2026-39817
Invoking "go tool pack" does not sanitize output paths in cmd/go
CVE-2026-39817
The "go tool pack" subcommand (usually used only by the compiler as an ...
BDU:2026-07952
Уязвимость команды go tool pack языка программирования Go, позволяющая нарушителю получить доступ на чтение и запись произвольных файлов
openSUSE-SU-2026:20763-1
Security update for go1.25
openSUSE-SU-2026:20762-1
Security update for go1.26
SUSE-SU-2026:2093-1
Security update for go1.25-openssl
SUSE-SU-2026:2092-1
Security update for go1.26-openssl
SUSE-SU-2026:2079-1
Security update for go1.25-openssl
SUSE-SU-2026:2078-1
Security update for go1.26-openssl
SUSE-SU-2026:1862-1
Security update for go1.25
SUSE-SU-2026:1861-1
Security update for go1.26
ELSA-2026-22112
ELSA-2026-22112: go-toolset:ol8 security update (IMPORTANT)
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
| GHSA-qc64-m6c2-v4x7 The "go tool pack" subcommand (usually used only by the compiler as an internal tool with known-good inputs) does not sanitize output filenames. Extracting a malicious archive file with the "pack" subcommand can write files to arbitrary locations on the filesystem. | CVSS3: 5.9 | 0% Низкий | 3 месяца назад |
 | CVE-2026-39817 The "go tool pack" subcommand (usually used only by the compiler as an internal tool with known-good inputs) does not sanitize output filenames. Extracting a malicious archive file with the "pack" subcommand can write files to arbitrary locations on the filesystem. | CVSS3: 5.9 | 0% Низкий | 3 месяца назад |
 | CVE-2026-39817 The "go tool pack" subcommand (usually used only by the compiler as an internal tool with known-good inputs) does not sanitize output filenames. Extracting a malicious archive file with the "pack" subcommand can write files to arbitrary locations on the filesystem. | CVSS3: 5.9 | 0% Низкий | 3 месяца назад |
 | CVE-2026-39817 Invoking "go tool pack" does not sanitize output paths in cmd/go | 0% Низкий | 3 месяца назад | |
| CVE-2026-39817 The "go tool pack" subcommand (usually used only by the compiler as an ... | CVSS3: 5.9 | 0% Низкий | 3 месяца назад |
 | BDU:2026-07952 Уязвимость команды go tool pack языка программирования Go, позволяющая нарушителю получить доступ на чтение и запись произвольных файлов | CVSS3: 5.9 | 0% Низкий | 4 месяца назад |
 | openSUSE-SU-2026:20763-1 Security update for go1.25 | 2 месяца назад | ||
| openSUSE-SU-2026:20762-1 Security update for go1.26 | 2 месяца назад | ||
| SUSE-SU-2026:2093-1 Security update for go1.25-openssl | 2 месяца назад | ||
| SUSE-SU-2026:2092-1 Security update for go1.26-openssl | 2 месяца назад | ||
| SUSE-SU-2026:2079-1 Security update for go1.25-openssl | 2 месяца назад | ||
| SUSE-SU-2026:2078-1 Security update for go1.26-openssl | 2 месяца назад | ||
| SUSE-SU-2026:1862-1 Security update for go1.25 | 3 месяца назад | ||
| SUSE-SU-2026:1861-1 Security update for go1.26 | 3 месяца назад | ||
| ELSA-2026-22112 ELSA-2026-22112: go-toolset:ol8 security update (IMPORTANT) | около 2 месяцев назад |
Уязвимостей на страницу