How many Go standard library path/filepath CVEs are in CISA KEV?

None of Go standard library path/filepath's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Which versions of Go standard library path/filepath are affected?

21 distinct Go standard library path/filepath versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in Go standard library path/filepath CVEs?

Go standard library path/filepath's CVEs most often map to these CWE weakness types: CWE-22 (Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')), CWE-674 (Uncontrolled Recursion).

What is the average severity of Go standard library path/filepath CVEs?

The average CVSS base score across Go standard library path/filepath's scored CVEs is 6.5.

Go standard library path/filepath Vulnerabilities: CVEs, CISA KEV & Security Advisories

Name: Go standard library path/filepath vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

RadicalNotion.AI

Go standard library path/filepath Vulnerabilities: CVEs, CISA KEV & Security Advisories

Overview

Go standard library path/filepath has 6 published CVE records since 2022, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 0 have a known public exploit. The average CVSS base score across scored CVEs is 6.5. Affected platforms include windows.

Severity and exploitation

How the CVSS severity of Go standard library path/filepath's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical0

High4

Medium1

Low1

In CISA’s Known Exploited Vulnerabilities catalog

None of Go standard library path/filepath's CVEs are currently listed in CISA's KEV catalog.

Public exploits

No Go standard library path/filepath CVEs currently have a tracked public exploit.

Affected versions and CVEs

Browse every Go standard library path/filepath version named in a CVE, then pick one to see only the CVEs that affect it.

Version ranges

< 1.20.112 CVEs
1.21.0-0 <= v < 1.21.42 CVEs
< 1.17.111 CVE
< 1.17.121 CVE
< 1.19.61 CVE
1.18.0-0 <= v < 1.18.31 CVE
1.18.0-0 <= v < 1.18.41 CVE
1.20.0-0 <= v < 1.20.11 CVE
1.20.11 <= v < 1.20.121 CVE
1.21.4 <= v < 1.21.51 CVE

Fixed in

1.20.11

Common weakness types

The CWE weakness categories most often found in Go standard library path/filepath CVEs. Follow any weakness for its full explanation.

Disclosure activity by year

How many Go standard library path/filepath CVEs were published each year.

2022

2023

2025

Other Go standard library products

Browse vulnerabilities for other products by Go standard library.

net/http26 CVEs crypto/x50914 CVEs html/template14 CVEs crypto/tls13 CVEs net/http/internal/http26 CVEs net/textproto6 CVEs os6 CVEs net/url

Frequently asked questions

Common questions about Go standard library path/filepath vulnerabilities.

How many CVEs does Go standard library path/filepath have?: Go standard library path/filepath has 6 published CVE records since 2022.
How many Go standard library path/filepath CVEs are in CISA KEV?: None of Go standard library path/filepath's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for Go standard library path/filepath vulnerabilities?: No Go standard library path/filepath CVEs currently have a tracked public exploit in this dataset.
Which versions of Go standard library path/filepath are affected?: 21 distinct Go standard library path/filepath versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in Go standard library path/filepath CVEs?: Go standard library path/filepath's CVEs most often map to these CWE weakness types: CWE-22 (Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')), CWE-674 (Uncontrolled Recursion).
What is the average severity of Go standard library path/filepath CVEs?: The average CVSS base score across Go standard library path/filepath's scored CVEs is 6.5.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track Go standard library path/filepath vulnerabilities

Get an alert for each new Go standard library path/filepath CVE, with AI-written analysis and remediation steps.

Create an account See pricing