Поиск уязвимостей
Количество 13
Количество 13
GHSA-mwfg-6wv9-379f
Go before 1.14.12 and 1.15.x before 1.15.5 allows Code Injection.
CVE-2020-28366
Code injection in the go command with cgo before Go 1.14.12 and Go 1.15.5 allows arbitrary code execution at build time via a malicious unquoted symbol name in a linked object file.
CVE-2020-28366
Code injection in the go command with cgo before Go 1.14.12 and Go 1.15.5 allows arbitrary code execution at build time via a malicious unquoted symbol name in a linked object file.
CVE-2020-28366
Code injection in the go command with cgo before Go 1.14.12 and Go 1.15.5 allows arbitrary code execution at build time via a malicious unquoted symbol name in a linked object file.
CVE-2020-28366
Arbitrary code execution in go command with cgo in cmd/go and cmd/cgo
CVE-2020-28366
Code injection in the go command with cgo before Go 1.14.12 and Go 1.1 ...
openSUSE-SU-2020:2139-1
Security update for go1.15
openSUSE-SU-2020:2067-1
Security update for go1.14
openSUSE-SU-2020:2047-1
Security update for go1.14
SUSE-SU-2020:3369-1
Security update for go1.14
SUSE-SU-2020:3368-1
Security update for go1.15
ELSA-2020-5493
ELSA-2020-5493: go-toolset:ol8 security update (MODERATE)
ALT-PU-2020-3356
ALT-PU-2020-3356: package `golang` update to version 1.15.5-alt1
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
| GHSA-mwfg-6wv9-379f Go before 1.14.12 and 1.15.x before 1.15.5 allows Code Injection. | CVSS3: 7.5 | 2% Низкий | больше 4 лет назад |
 | CVE-2020-28366 Code injection in the go command with cgo before Go 1.14.12 and Go 1.15.5 allows arbitrary code execution at build time via a malicious unquoted symbol name in a linked object file. | CVSS3: 7.5 | 2% Низкий | почти 6 лет назад |
 | CVE-2020-28366 Code injection in the go command with cgo before Go 1.14.12 and Go 1.15.5 allows arbitrary code execution at build time via a malicious unquoted symbol name in a linked object file. | CVSS3: 7.5 | 2% Низкий | около 6 лет назад |
 | CVE-2020-28366 Code injection in the go command with cgo before Go 1.14.12 and Go 1.15.5 allows arbitrary code execution at build time via a malicious unquoted symbol name in a linked object file. | CVSS3: 7.5 | 2% Низкий | почти 6 лет назад |
 | CVE-2020-28366 Arbitrary code execution in go command with cgo in cmd/go and cmd/cgo | CVSS3: 7.5 | 2% Низкий | 9 месяцев назад |
| CVE-2020-28366 Code injection in the go command with cgo before Go 1.14.12 and Go 1.1 ... | CVSS3: 7.5 | 2% Низкий | почти 6 лет назад |
 | openSUSE-SU-2020:2139-1 Security update for go1.15 | почти 6 лет назад | ||
| openSUSE-SU-2020:2067-1 Security update for go1.14 | почти 6 лет назад | ||
| openSUSE-SU-2020:2047-1 Security update for go1.14 | почти 6 лет назад | ||
| SUSE-SU-2020:3369-1 Security update for go1.14 | почти 6 лет назад | ||
| SUSE-SU-2020:3368-1 Security update for go1.15 | почти 6 лет назад | ||
| ELSA-2020-5493 ELSA-2020-5493: go-toolset:ol8 security update (MODERATE) | почти 6 лет назад | ||
| ALT-PU-2020-3356 ALT-PU-2020-3356: package `golang` update to version 1.15.5-alt1 | CVSS3: 7.5 | почти 6 лет назад |
Уязвимостей на страницу