Количество 12
Количество 12
CVE-2025-61731
Building a malicious file with cmd/go can cause can cause a write to an attacker-controlled file with partial control of the file content. The "#cgo pkg-config:" directive in a Go source file provides command-line arguments to provide to the Go pkg-config command. An attacker can provide a "--log-file" argument to this directive, causing pkg-config to write to an attacker-controlled location.
CVE-2025-61731
Building a malicious file with cmd/go can cause can cause a write to an attacker-controlled file with partial control of the file content. The "#cgo pkg-config:" directive in a Go source file provides command-line arguments to provide to the Go pkg-config command. An attacker can provide a "--log-file" argument to this directive, causing pkg-config to write to an attacker-controlled location.
CVE-2025-61731
Building a malicious file with cmd/go can cause can cause a write to a ...
GHSA-xvqr-69v8-f3gv
Building a malicious file with cmd/go can cause can cause a write to an attacker-controlled file with partial control of the file content. The "#cgo pkg-config:" directive in a Go source file provides command-line arguments to provide to the Go pkg-config command. An attacker can provide a "--log-file" argument to this directive, causing pkg-config to write to an attacker-controlled location.
openSUSE-SU-2026:20085-1
Security update for go1.25
openSUSE-SU-2026:20077-1
Security update for go1.24
SUSE-SU-2026:0219-1
Security update for go1.24
SUSE-SU-2026:0218-1
Security update for go1.25
SUSE-SU-2026:0308-1
Security update for go1.24-openssl
SUSE-SU-2026:0296-1
Security update for go1.24-openssl
SUSE-SU-2026:0298-1
Security update for go1.25-openssl
SUSE-SU-2026:0297-1
Security update for go1.25-openssl
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2025-61731 Building a malicious file with cmd/go can cause can cause a write to an attacker-controlled file with partial control of the file content. The "#cgo pkg-config:" directive in a Go source file provides command-line arguments to provide to the Go pkg-config command. An attacker can provide a "--log-file" argument to this directive, causing pkg-config to write to an attacker-controlled location. | CVSS3: 7.8 | 0% Низкий | 11 дней назад |
 | CVE-2025-61731 Building a malicious file with cmd/go can cause can cause a write to an attacker-controlled file with partial control of the file content. The "#cgo pkg-config:" directive in a Go source file provides command-line arguments to provide to the Go pkg-config command. An attacker can provide a "--log-file" argument to this directive, causing pkg-config to write to an attacker-controlled location. | CVSS3: 7.8 | 0% Низкий | 11 дней назад |
| CVE-2025-61731 Building a malicious file with cmd/go can cause can cause a write to a ... | CVSS3: 7.8 | 0% Низкий | 11 дней назад |
| GHSA-xvqr-69v8-f3gv Building a malicious file with cmd/go can cause can cause a write to an attacker-controlled file with partial control of the file content. The "#cgo pkg-config:" directive in a Go source file provides command-line arguments to provide to the Go pkg-config command. An attacker can provide a "--log-file" argument to this directive, causing pkg-config to write to an attacker-controlled location. | CVSS3: 7.8 | 0% Низкий | 11 дней назад |
 | openSUSE-SU-2026:20085-1 Security update for go1.25 | 18 дней назад | ||
| openSUSE-SU-2026:20077-1 Security update for go1.24 | 18 дней назад | ||
| SUSE-SU-2026:0219-1 Security update for go1.24 | 18 дней назад | ||
| SUSE-SU-2026:0218-1 Security update for go1.25 | 18 дней назад | ||
| SUSE-SU-2026:0308-1 Security update for go1.24-openssl | 12 дней назад | ||
| SUSE-SU-2026:0296-1 Security update for go1.24-openssl | 14 дней назад | ||
| SUSE-SU-2026:0298-1 Security update for go1.25-openssl | 14 дней назад | ||
| SUSE-SU-2026:0297-1 Security update for go1.25-openssl | 14 дней назад |
Уязвимостей на страницу