How many Go toolchain cmd/go CVEs are in CISA KEV?

None of Go toolchain cmd/go's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Which versions of Go toolchain cmd/go are affected?

50 distinct Go toolchain cmd/go versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in Go toolchain cmd/go CVEs?

Go toolchain cmd/go's CVEs most often map to these CWE weakness types: CWE-347 (Improper Verification of Cryptographic Signature), CWE-641 (Improper Restriction of Names for Files and Other Resources), CWE-73 (External Control of File Name or Path), CWE-88 (Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')).

How many critical Go toolchain cmd/go vulnerabilities are there?

Go toolchain cmd/go has 6 critical and 12 high-severity CVEs.

What is the average severity of Go toolchain cmd/go CVEs?

The average CVSS base score across Go toolchain cmd/go's scored CVEs is 8.1.

Go toolchain cmd/go Vulnerabilities: CVEs, CISA KEV & Security Advisories

Name: Go toolchain cmd/go vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

RadicalNotion.AI

Go toolchain cmd/go Vulnerabilities: CVEs, CISA KEV & Security Advisories

Overview

Go toolchain cmd/go has 21 published CVE records since 2020, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 0 have a known public exploit. The average CVSS base score across scored CVEs is 8.1.

This page aggregates every publicly disclosed vulnerability (CVE) affecting Go toolchain cmd/go, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list. Affected platforms include macos.

Severity and exploitation

How the CVSS severity of Go toolchain cmd/go's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical6

High12

Medium3

Low0

In CISA’s Known Exploited Vulnerabilities catalog

None of Go toolchain cmd/go's CVEs are currently listed in CISA's KEV catalog.

Public exploits

No Go toolchain cmd/go CVEs currently have a tracked public exploit.

Affected versions and CVEs

Browse every Go toolchain cmd/go version named in a CVE, then pick one to see only the CVEs that affect it.

Version ranges

< 1.19.103 CVEs
< 1.25.103 CVEs
1.20.0-0 <= v < 1.20.53 CVEs
1.26.0-0 <= v < 1.26.33 CVEs
< 1.14.122 CVEs
< 1.25.132 CVEs
1.15.0-0 <= v < 1.15.52 CVEs
1.25.0 <= v < 1.25.62 CVEs
1.26.0-0 <= v < 1.26.62 CVEs
1.27.0-0 <= v < 1.27.0-rc.32 CVEs
< 1.20.121 CVE

Common weakness types

The CWE weakness categories most often found in Go toolchain cmd/go CVEs. Follow any weakness for its full explanation.

Disclosure activity by year

How many Go toolchain cmd/go CVEs were published each year.

2020

2023

2024

2025

2026

Other Go toolchain products

Browse vulnerabilities for other products by Go toolchain.

cmd/cgo3 CVEs cmd/compile2 CVEs cmd\/go1 CVEs

All Go toolchain vulnerabilities

Frequently asked questions

Common questions about Go toolchain cmd/go vulnerabilities.

How many CVEs does Go toolchain cmd/go have?: Go toolchain cmd/go has 21 published CVE records since 2020.
How many Go toolchain cmd/go CVEs are in CISA KEV?: None of Go toolchain cmd/go's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for Go toolchain cmd/go vulnerabilities?: No Go toolchain cmd/go CVEs currently have a tracked public exploit in this dataset.
Which versions of Go toolchain cmd/go are affected?: 50 distinct Go toolchain cmd/go versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in Go toolchain cmd/go CVEs?: Go toolchain cmd/go's CVEs most often map to these CWE weakness types: CWE-347 (Improper Verification of Cryptographic Signature), CWE-641 (Improper Restriction of Names for Files and Other Resources), CWE-73 (External Control of File Name or Path), CWE-88 (Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')).
How many critical Go toolchain cmd/go vulnerabilities are there?: Go toolchain cmd/go has 6 critical and 12 high-severity CVEs.
What is the average severity of Go toolchain cmd/go CVEs?: The average CVSS base score across Go toolchain cmd/go's scored CVEs is 8.1.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track Go toolchain cmd/go vulnerabilities

Monitor new Go toolchain cmd/go vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.

Start free See pricing