Software Detail
Title
CVE
CRITICAL
HIGH
MEDIUM
LOW
CWE
Number of items displayed
Go Number Of NVD 138 CRITICAL 16 HIGH 83 MEDIUM 37 LOW 2
URL https://golang.org/
Explanation It is a programming language developed by Google.
It has a simple syntax and can be coded by anyone to look the same.
It has been adopted by many companies because it is good at parallel processing and can perform well on multi-core systems.
Since it is cross-compatible, it can be run in a variety of environments including Windows, Linux, Mac, and Android.

As a result of prioritizing simplicity, there are some disadvantages such as the lack of exception handling (there are alternative functions), which is common in other languages.
This may be implemented in the future.

A major release is made about every 6 months.
If a critical bug or security issue is fixed during the major release, a minor release is made.

The last two major releases are supported and covered.
Since major releases are made about every six months, the major version a year ago will no longer be supported.
Tag
  • オープンソース
  • BSD License
Add Information URL
No Type Name URL
1 https://github.com/golang/go/wiki/Go-Release-Cycle
2 https://golang.org/doc/devel/release.html
3 https://github.com/golang/go/wiki/MinorReleases
4 https://golang.org/security
5 https://golang.org/doc/copyright.html
List Of Product  [ Click to show release history and vulnerability information ]
No Name Latest Version Release date Initial release Normal Support Security Support
Service Pack Support		 Extended
for a fee		 Critical High Medium Low
111 go 1.21 1.21.13 Aug. 6, 2024 June 16, 2023 2 14 12 1
112 go 1.20 1.20.7 Aug. 1, 2023 Feb. 1, 2023 6 22 14 1
113 go 1.19 1.19.13 Sept. 6, 2023 Aug. 2, 2022 6 29 15 1
114 Go 1.18 1.18.10 Jan. 10, 2023 March 15, 2022 6 41 19 2
115 Go 1.17 1.17.13 Aug. 1, 2022 Aug. 16, 2021 8 47 20 2
116 Go 1.16 1.16.15 March 3, 2022 Feb. 16, 2021 8 53 27 2
117 Go 1.15 1.15.15 Aug. 4, 2021 Aug. 11, 2020 8 58 29 2
118 Go 1.14 1.14.15 Feb. 4, 2021 Feb. 25, 2020 8 58 31 2
119 Go 1.13 1.13.15 Aug. 6, 2020 Sept. 3, 2019 8 62 31 2
120 Go 1.12 1.12.17 Feb. 12, 2020 Feb. 25, 2019 10 63 31 2
121 go 1.9 1.9.7 11 66 32 2
122 go 1.8 1.8.7 11 66 33 2
123 go 1.7 1.7.6 11 69 33 2
124 go 1.6 1.6.4 11 71 33 2
125 go 1.5 1.5.4 11 72 33 2
126 go 1.4 1.4.3 14 70 33 2
127 go 1.3 1.3.3 14 70 34 2
128 go 1.2 1.20.7 Aug. 1, 2023 14 71 35 2
129 go 1.12 1.12.9 10 63 31 2
130 go 1.11 1.11.9 10 63 32 2
131 go 1.10 1.10.8 10 66 31 2
132 go 1.1 1.19.13 Sept. 6, 2023 14 72 35 2
133 go 1.0 1.0.3 15 70 33 2
134 go 0.0 0.0.0-20201203163018-be400aefbc4c 14 69 33 2
NVD Vulnerability Information
  • CRITICAL
  • HIGH
  • MEDIUM
  • LOW
No CVSS3
CVSS2		 Level
Attach Vector		 Title CWE CVE cpe23Uri or higher or less more than less than Update date
Published date		 Show Affected Exploit
PoC
Search
111 5.3
5.0 		MEDIUM
Network 		In Go before 1.13.13 and 1.14.x before 1.14.5, Certificate.Verify may lack a check on the VerifyOptions.KeyUsages EKU requirements (if VerifyOptions.Roots equals nil and the installation is on Window… CWE-295
Improper Certificate Validation  		CVE-2020-14039 cpe:2.3:a:golang:go:*:*
1.14.0

1.13.13
1.14.5 		2024-11-21 14:02
2020-07-18 		Show GitHub Exploit DB Packet Storm
112 7.5
7.8 		HIGH
Network 		Go before 1.12.16 and 1.13.x before 1.13.7 (and the crypto/cryptobyte package before 0.0.0-20200124225646-8b5121be2f68 for Go) allows attacks on clients (resulting in a panic) via a malformed X.509 c… CWE-295
Improper Certificate Validation  		CVE-2020-7919 cpe:2.3:a:golang:go:*:* 1.13
1.12

1.13.7
1.12.6 		2024-11-21 14:38
2020-03-17 		Show GitHub Exploit DB Packet Storm
113 9.8
7.5 		CRITICAL
Network 		The net/http library in net/http/transfer.go in Go before 1.4.3 does not properly parse HTTP headers, which allows remote attackers to conduct HTTP request smuggling attacks via a request that contai… CWE-444
HTTP Request Smuggling 		CVE-2015-5741 cpe:2.3:a:golang:go:*:* 1.4.3 2024-11-21 11:33
2020-02-9 		Show GitHub Exploit DB Packet Storm
114 8.1
5.8 		HIGH
Network 		A spoofing vulnerability exists in the way Windows CryptoAPI (Crypt32.dll) validates Elliptic Curve Cryptography (ECC) certificates.An attacker could exploit the vulnerability by using a spoofed code… CWE-295
Improper Certificate Validation  		CVE-2020-0601 cpe:2.3:a:golang:go:*:* 1.12
1.13

1.12.16
1.13.7 		2024-11-21 13:53
2020-01-15 		Show GitHub Exploit DB Packet Storm
115 7.5
5.0 		HIGH
Network 		Go before 1.12.11 and 1.3.x before 1.13.2 can panic upon an attempt to process network traffic containing an invalid DSA public key. There are several attack scenarios, such as traffic from a client … CWE-436
 Interpretation Conflict 		CVE-2019-17596 cpe:2.3:a:golang:go:*:* 1.13
1.12

1.13.2
1.12.11 		2024-11-21 13:32
2019-10-25 		Show GitHub Exploit DB Packet Storm
116 7.5
5.0 		HIGH
Network 		Go before 1.12.10 and 1.13.x before 1.13.1 allow HTTP Request Smuggling. CWE-444
HTTP Request Smuggling 		CVE-2019-16276 cpe:2.3:a:golang:go:*:* 1.13

1.13.1
1.12.10 		2024-11-21 13:30
2019-10-1 		Show GitHub Exploit DB Packet Storm
117 9.8
7.5 		CRITICAL
Network 		net/url in Go before 1.11.13 and 1.12.x before 1.12.8 mishandles malformed hosts in URLs, leading to an authorization bypass in some applications. This is related to a Host field with a suffix appear… NVD-CWE-noinfo
CVE-2019-14809 cpe:2.3:a:golang:go:*:*
1.12.0

1.11.13
1.12.8 		2024-11-21 13:27
2019-08-14 		Show GitHub Exploit DB Packet Storm
118 9.8
7.5 		CRITICAL
Network 		Go through 1.12.5 on Windows mishandles process creation with a nil environment in conjunction with a non-nil token, which allows attackers to obtain sensitive information or gain privileges. CWE-269
 Improper Privilege Management 		CVE-2019-11888 cpe:2.3:a:golang:go:*:* 1.12.5 2024-11-21 13:21
2019-05-13 		Show GitHub Exploit DB Packet Storm
119 6.1
4.3 		MEDIUM
Network 		An issue was discovered in net/http in Go 1.11.5. CRLF injection is possible if the attacker controls a url parameter, as demonstrated by the second argument to http.NewRequest with \r\n followed by … CWE-93
CRLF Injection 		CVE-2019-9741 cpe:2.3:a:golang:go:1.11.5:* 2024-11-21 13:52
2019-03-13 		Show GitHub Exploit DB Packet Storm
120 7.8
6.8 		HIGH
Local 		Go through 1.12 on Windows misuses certain LoadLibrary functionality, leading to DLL injection. CWE-427
 Uncontrolled Search Path Element 		CVE-2019-9634 cpe:2.3:a:golang:go:*:*
1.12

1.11.10
1.12.2 		2024-11-21 13:52
2019-03-9 		Show GitHub Exploit DB Packet Storm