Name
go
Version
1.26.4
Type
library
Description
Go programming language compiler
Licenses
BSD-3-Clause
PURL
-
CPE
cpe:2.3:*:golang:go:1.26.4:*:*:*:*:*:*:*

Other Versions#


Project
Branch
Version
kirkstone
1.17.13
scarthgap
1.22.12

Patches#


#
Title
Author
Resolve
1
cmd/dist: separate host and target builds
Alex Kube <alexander.j.kube@gmail.com>
2
exec.go: filter out build-specific paths from linker
Changqing Li <changqing.li@windriver.com>
3
cmd/go: clear GOROOT for func ldShared when -trimpath
Hongxu Jia <hongxu.jia@windriver.com>
4
cmd/go: Allow GOTOOLDIR to be overridden in the
Alex Kube <alexander.j.kube@gmail.com>
5
go: Filter build paths on staticly linked arches
Richard Purdie <richard.purdie@linuxfoundation.org>
6
ld: add soname to shareable objects
Alex Kube <alexander.j.kube@gmail.com>
7
cmd/go: make content-based hash generation less
Khem Raj <raj.khem@gmail.com>
8
cmd/go: make GOROOT precious by default
Alex Kube <alexander.j.kube@gmail.com>
9
src/cmd/dist/buildgo.go: do not hardcode host compilers
Alexander Kanavin <alex.kanavin@gmail.com>
10
make.bash: override CC when building dist and
Alex Kube <alexander.j.kube@gmail.com>

Vulnerabilities#


Name
Analysis
Description
False Positive
A command inject vulnerability allows an attacker to perform command injection on Windows applications that indirectly depend on the CreateProcess function when the specific conditions are satisfied.
False Positive
The protojson.Unmarshal function can enter an infinite loop when unmarshaling certain forms of invalid JSON. This condition can occur when unmarshaling into a message which contains a google.protobuf.Any value, or when the UnmarshalOptions.DiscardUnknown option is set.