Vendor
Go toolchain
Tracked since 12 Nov · latest article 12 Nov · RSS · API
None open
of 0 in the full CISA catalogue · all time
EPSS top 5%, not in KEV
usual rate
Exploited, by due date
No Go toolchain CVE is in the CISA KEV catalogue.
Patch cadence and exploit odds
How often CISA adds Go toolchain CVEs, how many have a fix, and where their exploit odds sit.
Added to CISA KEV per quarter
CISA has not added a Go toolchain CVE to KEV.
Fix listed
2 of 2 CVEs in coverage
Every CVE in coverage has a fix recorded.
EPSS percentile of each CVE
No EPSS scores are recorded for these CVEs.
Coverage1 article · all time
The latest article naming Go toolchain, in the shared story grammar.
1 article from 1 outlet since 12 Nov. Still developing; the latest report was 12 hours ago.
- Thu 12 Nov, 01:30 UTC. SecurityOnline, first report. Go releases fix build time code execution and HTTP flaws.
- CVE not in KEV
- No CVE
- Larger: an outlet’s first report
- Coverage over time
Show all 1 articles as a listHide the list
- Thu 12 NovDay 01
- Go releases fix build time code execution and HTTP flaws01:30 · SecurityOnline · First report
All CVEs in coverage2
Exploited first, then by EPSS
Cgo directive injection via .syso files disguised as Go object files in cmd/go and cmd/link
Not scored1 articleUnexpected code execution via --sysroot, -target, -isysroot, -Wl,-syslibroot, and -x cgo flags in cmd/go
Not scored1 article