Software Detail
Title
CVE
CRITICAL
HIGH
MEDIUM
LOW
CWE
Number of items displayed
Go Number Of NVD 138 CRITICAL 16 HIGH 83 MEDIUM 37 LOW 2
URL https://golang.org/
Explanation It is a programming language developed by Google.
It has a simple syntax and can be coded by anyone to look the same.
It has been adopted by many companies because it is good at parallel processing and can perform well on multi-core systems.
Since it is cross-compatible, it can be run in a variety of environments including Windows, Linux, Mac, and Android.

As a result of prioritizing simplicity, there are some disadvantages such as the lack of exception handling (there are alternative functions), which is common in other languages.
This may be implemented in the future.

A major release is made about every 6 months.
If a critical bug or security issue is fixed during the major release, a minor release is made.

The last two major releases are supported and covered.
Since major releases are made about every six months, the major version a year ago will no longer be supported.
Tag
  • オープンソース
  • BSD License
Add Information URL
No Type Name URL
1 https://github.com/golang/go/wiki/Go-Release-Cycle
2 https://golang.org/doc/devel/release.html
3 https://github.com/golang/go/wiki/MinorReleases
4 https://golang.org/security
5 https://golang.org/doc/copyright.html
List Of Product  [ Click to show release history and vulnerability information ]
No Name Latest Version Release date Initial release Normal Support Security Support
Service Pack Support		 Extended
for a fee		 Critical High Medium Low
71 go 1.21 1.21.13 Aug. 6, 2024 June 16, 2023 2 14 12 1
72 go 1.20 1.20.7 Aug. 1, 2023 Feb. 1, 2023 6 22 14 1
73 go 1.19 1.19.13 Sept. 6, 2023 Aug. 2, 2022 6 29 15 1
74 Go 1.18 1.18.10 Jan. 10, 2023 March 15, 2022 6 41 19 2
75 Go 1.17 1.17.13 Aug. 1, 2022 Aug. 16, 2021 8 47 20 2
76 Go 1.16 1.16.15 March 3, 2022 Feb. 16, 2021 8 53 27 2
77 Go 1.15 1.15.15 Aug. 4, 2021 Aug. 11, 2020 8 58 29 2
78 Go 1.14 1.14.15 Feb. 4, 2021 Feb. 25, 2020 8 58 31 2
79 Go 1.13 1.13.15 Aug. 6, 2020 Sept. 3, 2019 8 62 31 2
80 Go 1.12 1.12.17 Feb. 12, 2020 Feb. 25, 2019 10 63 31 2
81 go 1.9 1.9.7 11 66 32 2
82 go 1.8 1.8.7 11 66 33 2
83 go 1.7 1.7.6 11 69 33 2
84 go 1.6 1.6.4 11 71 33 2
85 go 1.5 1.5.4 11 72 33 2
86 go 1.4 1.4.3 14 70 33 2
87 go 1.3 1.3.3 14 70 34 2
88 go 1.2 1.20.7 Aug. 1, 2023 14 71 35 2
89 go 1.12 1.12.9 10 63 31 2
90 go 1.11 1.11.9 10 63 32 2
91 go 1.10 1.10.8 10 66 31 2
92 go 1.1 1.19.13 Sept. 6, 2023 14 72 35 2
93 go 1.0 1.0.3 15 70 33 2
94 go 0.0 0.0.0-20201203163018-be400aefbc4c 14 69 33 2
NVD Vulnerability Information
  • CRITICAL
  • HIGH
  • MEDIUM
  • LOW
No CVSS3
CVSS2		 Level
Attach Vector		 Title CWE CVE cpe23Uri or higher or less more than less than Update date
Published date		 Show Affected Exploit
PoC
Search
71 6.5
- 		MEDIUM
Network 		Acceptance of some invalid Transfer-Encoding headers in the HTTP/1 client in net/http before Go 1.17.12 and Go 1.18.4 allows HTTP request smuggling if combined with an intermediate server that also i… CWE-444
HTTP Request Smuggling 		CVE-2022-1705 cpe:2.3:a:golang:go:*:*
1.18.0

1.17.12
1.18.4 		2024-11-21 15:41
2022-08-11 		Show GitHub Exploit DB Packet Storm
72 7.5
- 		HIGH
Network 		Infinite loop in Read in crypto/rand before Go 1.17.11 and Go 1.18.3 on Windows allows attacker to cause an indefinite hang by passing a buffer larger than 1 << 32 - 1 bytes. CWE-835
 Loop with Unreachable Exit Condition ('Infinite Loop') 		CVE-2022-30634 cpe:2.3:a:golang:go:*:*
1.18.0

1.17.11
1.18.3 		2024-11-21 16:03
2022-07-16 		Show GitHub Exploit DB Packet Storm
73 5.3
5.0 		MEDIUM
Network 		Go before 1.17.10 and 1.18.x before 1.18.2 has Incorrect Privilege Assignment. When called with a non-zero flags parameter, the Faccessat function could incorrectly report that a file is accessible. CWE-269
 Improper Privilege Management 		CVE-2022-29526 cpe:2.3:a:golang:go:*:*
1.18.0

1.17.10
1.18.2 		2024-11-21 15:59
2022-06-24 		Show GitHub Exploit DB Packet Storm
74 7.5
5.0 		HIGH
Network 		The generic P-256 feature in crypto/elliptic in Go before 1.17.9 and 1.18.x before 1.18.1 allows a panic via long scalar input. NVD-CWE-noinfo
CVE-2022-28327 cpe:2.3:a:golang:go:*:* 1.18.0

1.18.1
1.17.9 		2024-11-21 15:57
2022-04-20 		Show GitHub Exploit DB Packet Storm
75 7.5
5.0 		HIGH
Network 		Certificate.Verify in crypto/x509 in Go 1.18.x before 1.18.1 can be caused to panic on macOS when presented with certain malformed certificates. This allows a remote TLS server to cause a TLS client … CWE-295
Improper Certificate Validation  		CVE-2022-27536 cpe:2.3:a:golang:go:*:* 1.18.0 1.18.1 2024-11-21 15:55
2022-04-20 		Show GitHub Exploit DB Packet Storm
76 7.5
5.0 		HIGH
Network 		encoding/pem in Go before 1.17.9 and 1.18.x before 1.18.1 has a Decode stack overflow via a large amount of PEM data. CWE-674
 Uncontrolled Recursion 		CVE-2022-24675 cpe:2.3:a:golang:go:*:* 1.18.0

1.18.1
1.17.9 		2024-11-21 15:50
2022-04-20 		Show GitHub Exploit DB Packet Storm
77 7.5
5.0 		HIGH
Network 		regexp.Compile in Go before 1.16.15 and 1.17.x before 1.17.8 allows stack exhaustion via a deeply nested expression. CWE-674
 Uncontrolled Recursion 		CVE-2022-24921 cpe:2.3:a:golang:go:*:*
1.17

1.16.15
1.17.8 		2024-11-21 15:51
2022-03-6 		Show GitHub Exploit DB Packet Storm
78 9.1
6.4 		CRITICAL
Network 		Curve.IsOnCurve in crypto/elliptic in Go before 1.16.14 and 1.17.x before 1.17.7 can incorrectly return true in situations with a big.Int value that is not a valid field element. CWE-252
 Unchecked Return Value 		CVE-2022-23806 cpe:2.3:a:golang:go:*:* 1.17.0

1.17.7
1.16.14 		2024-11-21 15:49
2022-02-11 		Show GitHub Exploit DB Packet Storm
79 7.5
5.0 		HIGH
Network 		cmd/go in Go before 1.16.14 and 1.17.x before 1.17.7 can misinterpret branch names that falsely appear to be version tags. This can lead to incorrect access control if an actor is supposed to be able… CWE-436
 Interpretation Conflict 		CVE-2022-23773 cpe:2.3:a:golang:go:*:* 1.17.0

1.17.7
1.16.14 		2024-11-21 15:49
2022-02-11 		Show GitHub Exploit DB Packet Storm
80 7.5
7.8 		HIGH
Network 		Rat.SetString in math/big in Go before 1.16.14 and 1.17.x before 1.17.7 has an overflow that can lead to Uncontrolled Memory Consumption. CWE-190
 Integer Overflow or Wraparound 		CVE-2022-23772 cpe:2.3:a:golang:go:*:* 1.17.0

1.17.7
1.16.14 		2024-11-21 15:49
2022-02-11 		Show GitHub Exploit DB Packet Storm