Golang Go vulnerabilities
171 published vulnerabilities in Golang Go, 2 of them exploited in the wild. The most were published in 2022 (34), and 28 so far in 2026.
Golang Go vulnerabilities by year
2012
2014
2015
2016
2017
2018
2019
2020
2021
2022
2023
2024
2025
2026
Most exploited Golang Go vulnerabilities
- CVE-2020-0601 Microsoft Windows CryptoAPI Spoofing
- CVE-2023-44487 HTTP/2 Rapid Reset Attack
- CVE-2026-27143 Missing bound checks can lead to memory corruption in safe Go in cmd/compile
- CVE-2024-24790 Unexpected behavior from Is methods for IPv4-mapped IPv6 addresses in net/netip
- CVE-2023-39320 Arbitrary code execution via go.mod toolchain directive in cmd/go
- CVE-2023-29402 Code injection via go command with cgo in cmd/go
- CVE-2023-29404 Improper handling of non-optional LDFLAGS in go command with cgo in cmd/go
- CVE-2023-29405 Improper sanitization of LDFLAGS with embedded spaces in go command with cgo in cmd/go
- CVE-2023-24540 Improper handling of JavaScript whitespace in html/template
- CVE-2023-24538 Backticks not treated as string delimiters in html/template
- CVE-2021-38297 Memory corruption in n/a
- CVE-2012-2666 Other in go/golang
Find these in your own software.
Upload an SBOM and sbomify checks it against every vulnerability here, every day.