Known vulnerabilities in Go programming language - page 2

Vendor: Google
Software CPE: cpe:2.3:a:google:golang:*:*:*:*:*:*:*:*
Total vulnerabilities: 177
Public exploits: 4
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Go programming language Go programming language is affected by 177 known vulnerabilities: 16 high, 125 medium, 36 low Critical High Medium Low

Vulnerabilities (177)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU140607 - Time-of-check Time-of-use (TOCTOU) Race Condition
CVE-2026-32282
CWE-367 Low
No
No
1.25.9, 1.26.2 31.07.2026 SB2026073125
SB2026073160
SB2026073161
and 46 more
#VU140606 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-32289
CWE-79 Medium
No
No
1.25.9, 1.26.2 31.07.2026 SB2026073125
SB20260731139
SB20260731140
and 3 more
#VU140605 - Improper Certificate Validation
CVE-2026-33810
CWE-295 Medium
No
No
1.26.2 31.07.2026 SB2026073125
SB2026073183
SB2026073184
and 5 more
#VU140604 - Memory corruption
CVE-2026-27144
CWE-119 Low
No
No
1.25.9, 1.26.2 31.07.2026 SB2026073125
SB2026073157
SB2026073158
and 11 more
#VU124115 - Improper Authorization
CVE-2026-27137
CWE-285 Medium
No
No
1.26.1 19.03.2026 SB2026031903
SB2026031905
SB2026032422
and 9 more
#VU124116 - Error Handling
CVE-2026-27138
CWE-388 Medium
No
No
1.26.1 19.03.2026 SB2026031903
SB2026031905
SB2026032422
and 2 more
#VU124117 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-27142
CWE-79 Medium
No
No
1.25.8, 1.26.1 19.03.2026 SB2026031903
SB2026031904
SB2026031905
and 15 more
#VU124118 - Improper input validation
CVE-2026-25679
CWE-20 Medium
No
No
1.25.8, 1.26.1 19.03.2026 SB2026031903
SB2026031904
SB2026031905
and 126 more
#VU124119 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-27139
CWE-22 Low
No
No
1.25.8, 1.26.1 19.03.2026 SB2026031903
SB2026031904
SB2026031905
and 13 more
#VU124038 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2025-61730
CWE-362 Low
No
No
1.24.12, 1.25.6 16.03.2026 SB2026031680
SB2026040225
SB2026041551
and 1 more
#VU124037 - Protection Mechanism Failure
CVE-2025-68119
CWE-693 High
No
No
1.24.12, 1.25.6 16.03.2026 SB2026031680
SB20260316110
SB20260316111
and 7 more
#VU124035 - Protection Mechanism Failure
CVE-2025-61731
CWE-693 High
No
No
1.24.12, 1.25.6 16.03.2026 SB2026031680
SB20260316116
SB2026032049
and 18 more
#VU124034 - Resource exhaustion
CVE-2025-61726
CWE-400 Medium
No
No
1.24.12, 1.25.6 16.03.2026 SB2026031636
SB2026031637
SB2026031638
and 139 more
#VU124033 - Improper input validation
CVE-2025-61728
CWE-20 Medium
No
No
1.24.12, 1.25.6 16.03.2026 SB2026031636
SB2026031637
SB2026031638
and 45 more
#VU123445 - Improper Control of Generation of Code ('Code Injection')
CVE-2025-61732
CWE-94 Medium
No
No
1.24.13, 1.25.7 03.03.2026 SB2026030334
SB2026030343
SB2026030375
and 25 more
#VU123129 - Improper Certificate Validation
CVE-2025-68121
CWE-295 High
No
No
1.24.13, 1.25.7 23.02.2026 SB2026022333
SB2026030334
SB2026030343
and 108 more
#VU119236 - Improper Certificate Validation
CVE-2025-61727
CWE-295 Low
No
No
1.24.11, 1.25.5 06.12.2025 SB2025120604
SB20251210172
SB20251210173
and 19 more
#VU119235 - Resource exhaustion
CVE-2025-61729
CWE-400 Medium
No
No
1.24.11, 1.25.5 06.12.2025 SB2025120604
SB20251210172
SB20251210173
and 144 more
#VU118191 - Resource exhaustion
CVE-2025-61724
CWE-400 Medium
No
No
1.24.8, 1.25.2 07.11.2025 SB2025110705
SB2025110731
SB2025111491
and 20 more
#VU118181 - Resource exhaustion
CVE-2025-58187
CWE-400 Medium
No
No
1.24.9, 1.25.3 07.11.2025 SB2025110706
SB2025110731
SB2025112832
and 21 more


Showing elements 21 - 40 out of 177