Vulnerabilities in Go standard library
111 resultsCVE-2026-32282MEDIUMTOCTOU permits root escape on Linux via Root.Chmod in os in internal/syscall/unixEPSS 0.3%CVE-2026-32288MEDIUMUnbounded allocation for old GNU sparse in archive/tarEPSS 0.3%CVE-2026-32289MEDIUMJsBraceDepth Context Tracking Bugs (XSS) in html/templateEPSS 0.3%CVE-2025-61730MEDIUMHandshake messages may be processed at the incorrect encryption level in crypto/tlsEPSS 0.3%CVE-2025-22866MEDIUMTiming sidechannel for P-256 on ppc64le in crypto/internal/nistecEPSS 0.3%CVE-2025-61727MEDIUMImproper application of excluded DNS name constraints when verifying wildcard names in crypto/x509EPSS 0.3%CVE-2026-33810HIGHCase-sensitive excludedSubtrees name constraints cause Auth Bypass in crypto/x509EPSS 0.3%CVE-2025-0913MEDIUMInconsistent handling of O_CREATE|O_EXCL on Unix and Windows in os in syscallEPSS 0.2%CVE-2025-22873LOWImproper access to parent directory of root in osEPSS 0.2%CVE-2026-27139LOWFileInfo can escape from a Root in osEPSS 0.2%CVE-2024-8244LOWWalk/WalkDir in path/filepath susceptible to symlink raceEPSS 0.2%