Software Detail

Software Informaton Top

Programming

Software Detail

Number Of NVD

138

CRITICAL

HIGH

MEDIUM

LOW

URL	https://golang.org/
Explanation	It is a programming language developed by Google. It has a simple syntax and can be coded by anyone to look the same. It has been adopted by many companies because it is good at parallel processing and can perform well on multi-core systems. Since it is cross-compatible, it can be run in a variety of environments including Windows, Linux, Mac, and Android. As a result of prioritizing simplicity, there are some disadvantages such as the lack of exception handling (there are alternative functions), which is common in other languages. This may be implemented in the future. A major release is made about every 6 months. If a critical bug or security issue is fixed during the major release, a minor release is made. The last two major releases are supported and covered. Since major releases are made about every six months, the major version a year ago will no longer be supported.
Tag	オープンソース BSD License

Add Information URL

No	Type	Name	URL
1			https://github.com/golang/go/wiki/Go-Release-Cycle
2			https://golang.org/doc/devel/release.html
3			https://github.com/golang/go/wiki/MinorReleases
4			https://golang.org/security
5			https://golang.org/doc/copyright.html

List Of Product [ Click to show release history and vulnerability information ]

No	Name	Latest Version	Release date	Initial release	Critical	High	Medium	Low
31	go 1.21	1.21.13	Aug. 6, 2024	June 16, 2023	2	14	12	1
32	go 1.20	1.20.7	Aug. 1, 2023	Feb. 1, 2023	6	22	14	1
33	go 1.19	1.19.13	Sept. 6, 2023	Aug. 2, 2022	6	29	15	1
34	Go 1.18	1.18.10	Jan. 10, 2023	March 15, 2022	6	41	19	2
35	Go 1.17	1.17.13	Aug. 1, 2022	Aug. 16, 2021	8	47	20	2
36	Go 1.16	1.16.15	March 3, 2022	Feb. 16, 2021	8	53	27	2
37	Go 1.15	1.15.15	Aug. 4, 2021	Aug. 11, 2020	8	58	29	2
38	Go 1.14	1.14.15	Feb. 4, 2021	Feb. 25, 2020	8	58	31	2
39	Go 1.13	1.13.15	Aug. 6, 2020	Sept. 3, 2019	8	62	31	2
40	Go 1.12	1.12.17	Feb. 12, 2020	Feb. 25, 2019	10	63	31	2
41	go 1.9	1.9.7			11	66	32	2
42	go 1.8	1.8.7			11	66	33	2
43	go 1.7	1.7.6			11	69	33	2
44	go 1.6	1.6.4			11	71	33	2
45	go 1.5	1.5.4			11	72	33	2
46	go 1.4	1.4.3			14	70	33	2
47	go 1.3	1.3.3			14	70	34	2
48	go 1.2	1.20.7	Aug. 1, 2023		14	71	35	2
49	go 1.12	1.12.9			10	63	31	2
50	go 1.11	1.11.9			10	63	32	2
51	go 1.10	1.10.8			10	66	31	2
52	go 1.1	1.19.13	Sept. 6, 2023		14	72	35	2
53	go 1.0	1.0.3			15	70	33	2
54	go 0.0	0.0.0-20201203163018-be400aefbc4c			14	69	33	2

NVD Vulnerability Information

CRITICAL
HIGH
MEDIUM
LOW

No	CVSS3 CVSS2	Level Attach Vector	Title	CWE	CVE	cpe23Uri	or higher	less than	Update date Published date	Show Affected	Exploit PoC Search
31	6.1 -	MEDIUM Network	The html/template package does not apply the proper rules for handling occurrences of "<script", "<!--", and "</script" within JS literals in <script> contexts. This may cause the template parser to …	CWE-79 Cross-site Scripting	CVE-2023-39319	cpe:2.3:a:golang:go::	1.21.0	1.21.1 1.20.8	2024-11-21 17:15 2023-09-9	Show	GitHub Exploit DB Packet Storm

32	6.1 -	MEDIUM Network	The html/template package does not properly handle HTML-like "" comment tokens, nor hashbang "#!" comment tokens, in <script> contexts. This may cause the template parser to improperly interpret the …	CWE-79 Cross-site Scripting	CVE-2023-39318	cpe:2.3:a:golang:go::	1.21.0	1.21.1 1.20.8	2024-11-21 17:15 2023-09-9	Show	GitHub Exploit DB Packet Storm

33	5.3 -	MEDIUM Network	Extremely large RSA keys in certificate chains can cause a client/server to expend significant CPU time verifying signatures. With fix, the size of RSA keys transmitted during handshakes is restricte…	CWE-400 Uncontrolled Resource Consumption	CVE-2023-29409	cpe:2.3:a:golang:go:1.21.0:rc3 cpe:2.3:a:golang:go:1.21.0:rc2 cpe:2.3:a:golang:go:1.21.0:rc1 cpe:2.3:a:golang:…	1.20.0	1.20.7 1.19.12	2024-11-21 16:57 2023-08-3	Show	GitHub Exploit DB Packet Storm

34	6.5 -	MEDIUM Network	The HTTP/1 client does not fully validate the contents of the Host header. A maliciously crafted Host header can inject additional headers or entire requests. With fix, the HTTP/1 client now refuses …	CWE-436 Interpretation Conflict	CVE-2023-29406	cpe:2.3:a:golang:go::	1.20.0	1.20.6 1.19.11	2024-11-21 16:56 2023-07-12	Show	GitHub Exploit DB Packet Storm

35	7.8 -	HIGH Local	On Unix platforms, the Go runtime does not behave differently when a binary is run with the setuid/setgid bits. This can be dangerous in certain cases, such as when dumping memory state, or assuming …	CWE-668 Exposure of Resource to Wrong Sphere	CVE-2023-29403	cpe:2.3:a:golang:go::	1.20.0	1.20.5 1.19.10	2024-11-21 16:56 2023-06-9	Show	GitHub Exploit DB Packet Storm

36	9.8 -	CRITICAL Network	The go command may execute arbitrary code at build time when using cgo. This may occur when running "go get" on a malicious module, or when running any other command which builds untrusted code. This…	CWE-74 Injection	CVE-2023-29405	cpe:2.3:a:golang:go::	1.20.0	1.20.5 1.19.10	2024-11-21 16:56 2023-06-9	Show	GitHub Exploit DB Packet Storm

37	9.8 -	CRITICAL Network	The go command may execute arbitrary code at build time when using cgo. This may occur when running "go get" on a malicious module, or when running any other command which builds untrusted code. This…	CWE-94 Code Injection	CVE-2023-29404	cpe:2.3:a:golang:go::	1.20.0	1.20.5 1.19.10	2024-11-21 16:56 2023-06-9	Show	GitHub Exploit DB Packet Storm

38	9.8 -	CRITICAL Network	The go command may generate unexpected code at build time when using cgo. This may result in unexpected behavior when running a go program which uses cgo. This may occur when running an untrusted mod…	CWE-94 Code Injection	CVE-2023-29402	cpe:2.3:a:golang:go::	1.20.0	1.20.5 1.19.10	2024-11-21 16:56 2023-06-9	Show	GitHub Exploit DB Packet Storm

39	7.3 -	HIGH Network	Templates containing actions in unquoted HTML attributes (e.g. "attr={{.}}") executed with empty input can result in output with unexpected results when parsed due to HTML normalization rules. This m…	CWE-74 Injection	CVE-2023-29400	cpe:2.3:a:golang:go::	1.20.0	1.20.4 1.19.9	2024-11-21 16:56 2023-05-12	Show	GitHub Exploit DB Packet Storm

40	9.8 -	CRITICAL Network	Not all valid JavaScript whitespace characters are considered to be whitespace. Templates containing whitespace characters outside of the character set "\t\n\f\r\u0020\u2028\u2029" in JavaScript cont…	NVD-CWE-noinfo	CVE-2023-24540	cpe:2.3:a:golang:go::	1.20.0	1.20.4 1.19.9	2024-11-21 16:48 2023-05-12	Show	GitHub Exploit DB Packet Storm