- How many CVEs does golang have?
- golang has 236 published CVE records since 2014, including 78 in the last two years.
- How many golang CVEs are in CISA KEV?
- Yes — 2 of golang's CVEs are listed in CISA's Known Exploited Vulnerabilities catalog, confirmed exploited in the wild and carrying a CISA remediation deadline.
- Which golang products have the most CVEs?
- The golang products with the most published CVEs are Go, crypto, net, image, http2.
- What are the most common weakness types in golang CVEs?
- golang's CVEs most often map to these CWE weakness types: CWE-400 (Uncontrolled Resource Consumption), CWE-770 (Allocation of Resources Without Limits or Throttling), CWE-94 (Improper Control of Generation of Code ('Code Injection')), CWE-295 (Improper Certificate Validation).
- Are there public exploits for golang vulnerabilities?
- Yes — 11 of golang's CVEs have a known public exploit.
- How many critical golang vulnerabilities are there?
- golang has 33 critical and 132 high-severity CVEs.
- What is the average severity of golang CVEs?
- The average CVSS base score across golang's scored CVEs is 7.3.