Vulnerabilities

TI-2023-13785 CVE-2023-29405 · GHSA-68g3-2p3g-w9pq

Improper sanitization of LDFLAGS with embedded spaces in go command with cgo in cmd/go

MEDIUM 52

The go command may execute arbitrary code at build time when using cgo.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01714 Published 2023-06-08 Partial fix · 1.19.10, 1.20.5 CWE-74

TI-2023-13784 CVE-2023-29404 · GHSA-888h-rm2r-vrc7

MEDIUM 52

The go command may execute arbitrary code at build time when using cgo.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01822 Published 2023-06-08 Partial fix · 1.19.10, 1.20.5 CWE-94

TI-2023-13782 CVE-2023-29402 · GHSA-f2cj-5636-4j38

MEDIUM 52

The go command may generate unexpected code at build time when using cgo.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01694 Published 2023-06-08 Partial fix · 1.19.10, 1.20.5 CWE-94