VDB
BIT-golang-2025-61731
BIT-golang-2025-61731
PUBLISHED
CVSS 7.800000190734863 HIGH
Arbitrary file write using cgo pkg-config directive in cmd/go
Risk Scores
CVSS 3.1
7.800000190734863
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Bitnami | golang | 0, 1.25.0, 0 |
Timeline
- Jan 31, 2026 CVE Published
- Jul 13, 2026 CVE Updated
- Aug 8, 2026 Distribution Patch
- Aug 8, 2026 Distribution Patch
- Aug 8, 2026 Distribution Patch
- Aug 8, 2026 Distribution Patch
- Aug 8, 2026 Distribution Patch
- Aug 8, 2026 Distribution Patch
- Aug 8, 2026 Distribution Patch
- Aug 8, 2026 Distribution Patch
- Aug 8, 2026 Distribution Patch
- Aug 8, 2026 Distribution Patch
References
- https://go.dev/cl/736711 url
- https://go.dev/issue/77100 url
- https://groups.google.com/g/golang-announce/c/Vd2tYVM8eUc url
- https://nvd.nist.gov/vuln/detail/CVE-2025-61731 url
- https://pkg.go.dev/vuln/GO-2026-4339 url
- https://access.redhat.com/errata/RHSA-2026:12118 url
- https://access.redhat.com/errata/RHSA-2026:12282 url
- https://access.redhat.com/errata/RHSA-2026:13736 url
- https://access.redhat.com/errata/RHSA-2026:14100 url
- https://access.redhat.com/errata/RHSA-2026:14774 url
- https://access.redhat.com/errata/RHSA-2026:15091 url
- https://access.redhat.com/errata/RHSA-2026:20088 url
- https://access.redhat.com/errata/RHSA-2026:21691 url
- https://access.redhat.com/errata/RHSA-2026:3556 url
- https://access.redhat.com/errata/RHSA-2026:3559 url
- https://access.redhat.com/errata/RHSA-2026:3855 url
- https://access.redhat.com/errata/RHSA-2026:4434 url
- https://access.redhat.com/errata/RHSA-2026:5133 url
- https://access.redhat.com/errata/RHSA-2026:5907 url
- https://access.redhat.com/errata/RHSA-2026:5941 url
…and 21 more