CVE security advisories and vulnerability history for go by golang.
175
Total CVEs
Published
2
In CISA KEV
Exploited in the wild
5
Public exploits
With known exploit
7.2
Avg CVSS
2014–2026
Last updated
Overview
golang go has 175 published CVE records since 2014, of which 2 are in CISA's Known Exploited Vulnerabilities catalog and 5 have a known public exploit. The average CVSS base score across scored CVEs is 7.2.
This page aggregates every publicly disclosed vulnerability (CVE) affecting golang go, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list.
Severity and exploitation
How the CVSS severity of golang go's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.
Critical12
High45
Medium28
Low3
87 additional CVEs have no CVSS severity score.
In CISA’s Known Exploited Vulnerabilities catalog
2
2 of golang go's CVEs are confirmed exploited in the wild.
Public exploits
5
5 of golang go's CVEs have a known public exploit available.
Affected versions and CVEs
Browse every golang go version named in a CVE, then pick one to see only the CVEs that affect it.
golang go has 175 published CVE records since 2014.
How many golang go CVEs are in CISA KEV?
Yes — 2 of golang go's CVEs are listed in CISA's Known Exploited Vulnerabilities catalog, confirmed exploited in the wild and carrying a CISA remediation deadline.
Are there public exploits for golang go vulnerabilities?
Yes — 5 of golang go's CVEs have a known public exploit.
Which versions of golang go are affected?
557 distinct golang go versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in golang go CVEs?
golang go's CVEs most often map to these CWE weakness types: CWE-94 (Improper Control of Generation of Code ('Code Injection')), CWE-400 (Uncontrolled Resource Consumption), CWE-115 (Misinterpretation of Input), CWE-20 (Improper Input Validation).
How many critical golang go vulnerabilities are there?
golang go has 12 critical and 45 high-severity CVEs.
What is the average severity of golang go CVEs?
The average CVSS base score across golang go's scored CVEs is 7.2.
