VDB

GO-2026-4979

GO-2026-4979 PUBLISHED

Invoking "go tool pack" does not sanitize output paths in cmd/go

Affected Products

VendorProductVersions
Gotoolchain0, 1.26.0-0

Timeline

  • May 7, 2026 CVE Published
  • May 11, 2026 CVE Updated
Open in Interactive Console →
$ Console Community · 100/wk Open console ›