Read the docs

golang.org/x/playground

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

golang.org/x/playground records in CISA KEV

No golang.org/x/playground vulnerabilities are listed in CISA KEV.

Records

1 record

Priority MEDIUM 40

A malicious txtar could escape the intended execution context and force arbitrary writes to the playground host's trusted filesystem.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00363 Published 2026-09-25 Fixed in 0.0.0-20260924211604-6d73cff14c17 CWE-20
Open these records in search →