GT
Vendor security profile
Go toolchain
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs7
Critical0
CISA KEV0
Public exploit0
Patch rate%43
Avg. CVSS8.2
12-month vulnerability rate
0
0
1
1
0
1
0
0
0
2
0
2
CVE KEV
CVE severity distribution
7toplam CVE
High5 (71%)
Uncertain2 (29%)
Patch and exploitation view
%43
Verified patch
%0
CISA KEV
%0
Public exploit
3Patch available
0Partial
0Workaround
0Vendor: no patch
4Unknown
Latest vulnerabilities
-
CVE-2026-94447
Checksum database bypass for golang.org/toolchain in cmd/go
GT
Patch status unknownEPSS %0
-
CVE-2026-94444
Checksum bypass for golang.org/fips140 in cmd/go
GT
Patch status unknownEPSS %0
7.5
CVE-2026-56864
Ignore unrelated, unauthenticated hashes in Lookup in golang.org/x/mod/sumdb
GT
Patch status unknownEPSS %0
8.4
CVE-2026-56865
Fix transparency log tile verification bypass in golang.org/x/mod/sumdb/tlog
GT
Patch status unknownEPSS %0
8.8
CVE-2026-27140
Code execution vulnerability in SWIG code generation in cmd/go
GT
Patch verifiedEPSS %1
8.6
CVE-2025-61732
Potential code smuggling via doc comments in cmd/cgo
GT
Patch verifiedEPSS %1
7.8
CVE-2025-61731
Arbitrary file write using cgo pkg-config directive in cmd/go
GT
Patch verifiedEPSS %1