Product by Go Standard Library

    OS

    6 known vulnerabilities in OS (Go Standard Library), 0 of them actively exploited (CISA KEV).

    Key figures

    6

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    1

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in OS (Go Standard Library)
    CriticalCVE-2026-56857

    Root.Mkdir (All) can follow junctions out of the root on Windows in os

    also in 2 other products

    		9.8
    HighCVE-2022-41720

    Restricted file access on Windows in os and net/http

    also in 2 other products

    		7.5
    HighCVE-2026-39822

    Root escape via symlink plus trailing slash in os

    also in 3 other products

    		7.8
    MediumCVE-2025-0913

    Inconsistent handling of O_CREATE|O_EXCL on Unix and Windows in os in syscall

    also in 1 other product

    		5.5
    LowCVE-2025-22873

    Improper access to parent directory of root in os

    also in 1 other product

    		3.8
    LowCVE-2026-27139

    FileInfo can escape from a Root in os

    also in 2 other products

    		2.5

    All products by Go Standard Library