How many Go standard library os CVEs are in CISA KEV?

None of Go standard library os's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Which versions of Go standard library os are affected?

26 distinct Go standard library os versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in Go standard library os CVEs?

Go standard library os's CVEs most often map to these CWE weakness types: CWE-22 (Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')), CWE-1386 (Insecure Operation on Windows Junction / Mount Point), CWE-23 (Relative Path Traversal), CWE-59 (Improper Link Resolution Before File Access ('Link Following')).

How many critical Go standard library os vulnerabilities are there?

Go standard library os has 1 critical and 2 high-severity CVEs.

What is the average severity of Go standard library os CVEs?

The average CVSS base score across Go standard library os's scored CVEs is 6.2.

Go standard library os Vulnerabilities: CVEs, CISA KEV & Security Advisories

Name: Go standard library os vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

RadicalNotion.AI

Go standard library os Vulnerabilities: CVEs, CISA KEV & Security Advisories

Overview

Go standard library os has 6 published CVE records since 2022, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 0 have a known public exploit. The average CVSS base score across scored CVEs is 6.2. Affected platforms include windows.

Severity and exploitation

How the CVSS severity of Go standard library os's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical1

High2

Medium1

Low2

In CISA’s Known Exploited Vulnerabilities catalog

None of Go standard library os's CVEs are currently listed in CISA's KEV catalog.

Public exploits

No Go standard library os CVEs currently have a tracked public exploit.

Affected versions and CVEs

Browse every Go standard library os version named in a CVE, then pick one to see only the CVEs that affect it.

Version ranges

< 1.18.91 CVE
< 1.23.101 CVE
< 1.23.91 CVE
< 1.25.121 CVE
< 1.25.81 CVE
< 1.26.91 CVE
1.19.0-0 <= v < 1.19.41 CVE
1.24.0-0 <= v < 1.24.31 CVE
1.24.0-0 <= v < 1.24.41 CVE
1.26.0-0 <= v < 1.26.11 CVE
1.26.0-0 <= v < 1.26.51 CVE
1.27.0-0 <= v < 1.27.0-rc.2

Common weakness types

The CWE weakness categories most often found in Go standard library os CVEs. Follow any weakness for its full explanation.

Disclosure activity by year

How many Go standard library os CVEs were published each year.

2022

2025

2026

Other Go standard library products

Browse vulnerabilities for other products by Go standard library.

net/http26 CVEs crypto/x50914 CVEs html/template14 CVEs crypto/tls13 CVEs net/http/internal/http26 CVEs net/textproto6 CVEs path/filepath6 CVEs net/url

Frequently asked questions

Common questions about Go standard library os vulnerabilities.

How many CVEs does Go standard library os have?: Go standard library os has 6 published CVE records since 2022.
How many Go standard library os CVEs are in CISA KEV?: None of Go standard library os's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for Go standard library os vulnerabilities?: No Go standard library os CVEs currently have a tracked public exploit in this dataset.
Which versions of Go standard library os are affected?: 26 distinct Go standard library os versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in Go standard library os CVEs?: Go standard library os's CVEs most often map to these CWE weakness types: CWE-22 (Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')), CWE-1386 (Insecure Operation on Windows Junction / Mount Point), CWE-23 (Relative Path Traversal), CWE-59 (Improper Link Resolution Before File Access ('Link Following')).
How many critical Go standard library os vulnerabilities are there?: Go standard library os has 1 critical and 2 high-severity CVEs.
What is the average severity of Go standard library os CVEs?: The average CVSS base score across Go standard library os's scored CVEs is 6.2.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track Go standard library os vulnerabilities

Get an alert for each new Go standard library os CVE, with AI-written analysis and remediation steps.

Create an account See pricing