Поиск уязвимостей
Количество 15
Количество 15
CVE-2026-56857
On Windows, when the target of Root.Mkdir or Root.MkdirAll is a junction pointing to an empty location, the operation can create a directory at the junction target even when that target is located outside the root. This only applies to operations where the last path component is a junction (path/to/junction, but not path/junction/target).
CVE-2026-56857
On Windows, when the target of Root.Mkdir or Root.MkdirAll is a junction pointing to an empty location, the operation can create a directory at the junction target even when that target is located outside the root. This only applies to operations where the last path component is a junction (path/to/junction, but not path/junction/target).
CVE-2026-56857
On Windows, when the target of Root.Mkdir or Root.MkdirAll is a junction pointing to an empty location, the operation can create a directory at the junction target even when that target is located outside the root. This only applies to operations where the last path component is a junction (path/to/junction, but not path/junction/target).
CVE-2026-56857
Root.Mkdir(All) can follow junctions out of the root on Windows in os
CVE-2026-56857
On Windows, when the target of Root.Mkdir or Root.MkdirAll is a juncti ...
GHSA-c3q7-m35p-9qq7
On Windows, when the target of Root.Mkdir or Root.MkdirAll is a junction pointing to an empty location, the operation can create a directory at the junction target even when that target is located outside the root. This only applies to operations where the last path component is a junction (path/to/junction, but not path/junction/target).
BDU:2026-18197
Уязвимость пакетов os и internal/syscall/windows языка программирования Go, позволяющая нарушителю записывать произвольные файлы
openSUSE-SU-2026:22095-1
Security update for go1.26
SUSE-SU-2026:4629-1
Security update for go1.26
openSUSE-SU-2026:22093-1
Security update for go1.27
SUSE-SU-2026:4625-1
Security update for go1.27
ALT-PU-2026-18336
ALT-PU-2026-18336: package `golang` update to version 1.27.2-alt1
SUSE-SU-2026:4867-1
Security update for go1.26-openssl
SUSE-SU-2026:4866-1
Security update for go1.26-openssl
ALT-PU-2026-20873
ALT-PU-2026-20873: package `mimir` update to version 3.2.3-alt1
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2026-56857 On Windows, when the target of Root.Mkdir or Root.MkdirAll is a junction pointing to an empty location, the operation can create a directory at the junction target even when that target is located outside the root. This only applies to operations where the last path component is a junction (path/to/junction, but not path/junction/target). | CVSS3: 9.8 | 1% Низкий | около 1 месяца назад |
 | CVE-2026-56857 On Windows, when the target of Root.Mkdir or Root.MkdirAll is a junction pointing to an empty location, the operation can create a directory at the junction target even when that target is located outside the root. This only applies to operations where the last path component is a junction (path/to/junction, but not path/junction/target). | CVSS3: 3.3 | 1% Низкий | около 1 месяца назад |
 | CVE-2026-56857 On Windows, when the target of Root.Mkdir or Root.MkdirAll is a junction pointing to an empty location, the operation can create a directory at the junction target even when that target is located outside the root. This only applies to operations where the last path component is a junction (path/to/junction, but not path/junction/target). | CVSS3: 9.8 | 1% Низкий | около 1 месяца назад |
 | CVE-2026-56857 Root.Mkdir(All) can follow junctions out of the root on Windows in os | CVSS3: 9.8 | 1% Низкий | 29 дней назад |
| CVE-2026-56857 On Windows, when the target of Root.Mkdir or Root.MkdirAll is a juncti ... | CVSS3: 9.8 | 1% Низкий | около 1 месяца назад |
| GHSA-c3q7-m35p-9qq7 On Windows, when the target of Root.Mkdir or Root.MkdirAll is a junction pointing to an empty location, the operation can create a directory at the junction target even when that target is located outside the root. This only applies to operations where the last path component is a junction (path/to/junction, but not path/junction/target). | CVSS3: 9.8 | 1% Низкий | около 1 месяца назад |
 | BDU:2026-18197 Уязвимость пакетов os и internal/syscall/windows языка программирования Go, позволяющая нарушителю записывать произвольные файлы | CVSS3: 9.8 | 1% Низкий | около 1 месяца назад |
 | openSUSE-SU-2026:22095-1 Security update for go1.26 | 27 дней назад | ||
| SUSE-SU-2026:4629-1 Security update for go1.26 | 28 дней назад | ||
| openSUSE-SU-2026:22093-1 Security update for go1.27 | 27 дней назад | ||
| SUSE-SU-2026:4625-1 Security update for go1.27 | 28 дней назад | ||
| ALT-PU-2026-18336 ALT-PU-2026-18336: package `golang` update to version 1.27.2-alt1 | CVSS3: 9.8 | 7 дней назад | |
| SUSE-SU-2026:4867-1 Security update for go1.26-openssl | 18 дней назад | ||
| SUSE-SU-2026:4866-1 Security update for go1.26-openssl | 18 дней назад | ||
| ALT-PU-2026-20873 ALT-PU-2026-20873: package `mimir` update to version 3.2.3-alt1 | CVSS3: 9.8 | 4 дня назад |
Уязвимостей на страницу