How many Go toolchain cmd/cgo CVEs are in CISA KEV?

None of Go toolchain cmd/cgo's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Which versions of Go toolchain cmd/cgo are affected?

12 distinct Go toolchain cmd/cgo versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in Go toolchain cmd/cgo CVEs?

Go toolchain cmd/cgo's CVEs most often map to these CWE weakness types: CWE-94 (Improper Control of Generation of Code ('Code Injection')).

How many critical Go toolchain cmd/cgo vulnerabilities are there?

Go toolchain cmd/cgo has 1 critical and 2 high-severity CVEs.

What is the average severity of Go toolchain cmd/cgo CVEs?

The average CVSS base score across Go toolchain cmd/cgo's scored CVEs is 8.6.

Go toolchain cmd/cgo Vulnerabilities: CVEs, CISA KEV & Security Advisories

Name: Go toolchain cmd/cgo vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

RadicalNotion.AI

Go toolchain cmd/cgo Vulnerabilities: CVEs, CISA KEV & Security Advisories

Overview

Go toolchain cmd/cgo has 3 published CVE records since 2020, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 0 have a known public exploit. The average CVSS base score across scored CVEs is 8.6.

This page aggregates every publicly disclosed vulnerability (CVE) affecting Go toolchain cmd/cgo, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list.

Severity and exploitation

How the CVSS severity of Go toolchain cmd/cgo's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical1

High2

Medium0

Low0

In CISA’s Known Exploited Vulnerabilities catalog

None of Go toolchain cmd/cgo's CVEs are currently listed in CISA's KEV catalog.

Public exploits

No Go toolchain cmd/cgo CVEs currently have a tracked public exploit.

Affected versions and CVEs

Browse every Go toolchain cmd/cgo version named in a CVE, then pick one to see only the CVEs that affect it.

Version ranges

< 1.14.121 CVE
< 1.19.101 CVE
< 1.24.131 CVE
1.15.0-0 <= v < 1.15.51 CVE
1.20.0-0 <= v < 1.20.51 CVE
1.25.0-0 <= v < 1.25.71 CVE

Fixed in

1.14.121 CVE
1.15.51 CVE
1.19.101 CVE
1.20.51 CVE
1.24.131 CVE

Common weakness types

The CWE weakness categories most often found in Go toolchain cmd/cgo CVEs. Follow any weakness for its full explanation.

CWE-94Improper Control of Generation of Code ('Code Injection')1 CVE

Disclosure activity by year

How many Go toolchain cmd/cgo CVEs were published each year.

2020

2023

2026

Other Go toolchain products

Browse vulnerabilities for other products by Go toolchain.

cmd/go21 CVEs cmd/compile2 CVEs cmd\/go1 CVEs

All Go toolchain vulnerabilities

Frequently asked questions

Common questions about Go toolchain cmd/cgo vulnerabilities.

How many CVEs does Go toolchain cmd/cgo have?: Go toolchain cmd/cgo has 3 published CVE records since 2020.
How many Go toolchain cmd/cgo CVEs are in CISA KEV?: None of Go toolchain cmd/cgo's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for Go toolchain cmd/cgo vulnerabilities?: No Go toolchain cmd/cgo CVEs currently have a tracked public exploit in this dataset.
Which versions of Go toolchain cmd/cgo are affected?: 12 distinct Go toolchain cmd/cgo versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in Go toolchain cmd/cgo CVEs?: Go toolchain cmd/cgo's CVEs most often map to these CWE weakness types: CWE-94 (Improper Control of Generation of Code ('Code Injection')).
How many critical Go toolchain cmd/cgo vulnerabilities are there?: Go toolchain cmd/cgo has 1 critical and 2 high-severity CVEs.
What is the average severity of Go toolchain cmd/cgo CVEs?: The average CVSS base score across Go toolchain cmd/cgo's scored CVEs is 8.6.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track Go toolchain cmd/cgo vulnerabilities

Monitor new Go toolchain cmd/cgo vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.

Start free See pricing