golang vulnerabilities

4 published CVEs name golang among the affected products.

Critical 3High 0Medium 1Low 0Not scored 0

CVEs per yearBy the year they were published

CVE-2020-29509
The encoding/xml package in Go (all versions) does not correctly preserve the semantics of attribute namespace prefixes during tokenization round-trips, which…
Golang · Go
Critical9.8
CVE-2020-29511
The encoding/xml package in Go (all versions) does not correctly preserve the semantics of element namespace prefixes during tokenization round-trips, which…
Golang · Go
Critical9.8
CVE-2020-29510
The encoding/xml package in Go versions 1.15 and earlier does not correctly preserve the semantics of directives during tokenization round-trips, which allows…
Golang · Go
Critical9.8
CVE-2018-1002207
mholt/archiver golang package before e4ef56d48eb029648b0e895bb0b6a393ef0829c3 is vulnerable to directory traversal, allowing attackers to write to arbitrary…
golang · archiver
Medium5.5