If the PATH environment variable contains paths which are executables (rather than just directories), passing certain strings to LookPath ("", ".", and ".."), can result in the binaries listed in the PATH being unexpectedly returned.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade golang-raceUpgrade golang-testsUpgrade delveUpgrade go-toolsetUpgrade go-srpm-macrosUpgrade golang-binUpgrade golang-docsUpgrade go-filesystemUpgrade go-rpm-templatesUpgrade golang-miscUpgrade golangUpgrade golang-srcUpgrade go-rpm-macros | Nov 26, 2025 | Nov 25, 2025 |
| Alpine Linux | — | Upgrade go | Sep 19, 2025 | Sep 18, 2025 |
| Amazon Linux Ami 2 | — | Upgrade golang-srcUpgrade golang-miscUpgrade golangUpgrade golang-testsUpgrade golang-sharedUpgrade golang-binUpgrade golang-docs | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade golang-sharedUpgrade golang-binUpgrade golang-docsUpgrade golang-testsUpgrade golang-miscUpgrade golang-srcUpgrade golang | Dec 4, 2025 | Sep 18, 2025 |
| Huawei Euleros 2_0_sp10 | — | Upgrade golang-helpUpgrade golangUpgrade golang-devel | Nov 12, 2025 | Nov 6, 2025 |
| Huawei Euleros 2_0_sp11 | — | Upgrade golang-helpUpgrade golang-develUpgrade golang | Dec 12, 2025 | Nov 6, 2025 |
| Huawei Euleros 2_0_sp12 | — | Upgrade golangUpgrade golang-helpUpgrade golang-devel | Nov 12, 2025 | Nov 6, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade golang-develUpgrade golangUpgrade golang-help | Nov 21, 2025 | Nov 6, 2025 |
| Oracle_linux | — | Upgrade golang-srcUpgrade golang-miscUpgrade go-toolsetUpgrade go-rpm-templatesUpgrade golang-testsUpgrade go-rpm-macrosUpgrade golangUpgrade go-srpm-macrosUpgrade golang-binUpgrade delveUpgrade golang-docsUpgrade go-filesystemUpgrade golang-race | Nov 28, 2025 | Sep 18, 2025 |
| Redhat_linux | — | No solution existsUpgrade golang-raceUpgrade go-srpm-macrosUpgrade delveUpgrade go-rpm-macros-debuginfoUpgrade go-rpm-templatesUpgrade golang-docsUpgrade delve-debugsourceUpgrade go-rpm-macros-debugsourceUpgrade golang-srcUpgrade golang-miscUpgrade golangUpgrade go-rpm-macrosUpgrade go-filesystemUpgrade golang-testsUpgrade golang-binUpgrade go-toolsetUpgrade delve-debuginfo | Nov 14, 2025 | Sep 18, 2025 |
| Rocky_linux | — | Upgrade golang-raceUpgrade delve-debuginfoUpgrade delve-debugsourceUpgrade golangUpgrade go-toolsetUpgrade go-rpm-macros-debuginfoUpgrade go-rpm-macros-debugsourceUpgrade delveUpgrade golang-binUpgrade go-rpm-macrosUpgrade go-filesystem | Feb 5, 2026 | Dec 4, 2025 |
| Splunk | — | Upgrade Splunk Enterprise to version 10.0.4Upgrade Splunk Enterprise to version 10.2.1Upgrade Splunk Enterprise to version 9.3.9Upgrade Splunk Enterprise to version 10.0.3Upgrade Splunk Enterprise to version 9.4.9Upgrade Splunk Enterprise to version 9.2.12Upgrade Splunk Enterprise to version 9.4.8Upgrade Splunk Enterprise to version 9.3.10 | Jul 30, 2026 | Sep 18, 2025 |
| Suse | — | Upgrade go1.25-openssl-raceUpgrade go1.24-openssl-raceUpgrade go1.24-raceUpgrade go1.23-raceUpgrade go1.24-libstdUpgrade go1.25-raceUpgrade go1.25-docUpgrade go1.25-opensslUpgrade go1.23-opensslUpgrade go1.25Upgrade go1.24Upgrade go1.24-opensslUpgrade go1.25-openssl-docUpgrade go1.23-openssl-docUpgrade go1.23-docUpgrade go1.25-libstdUpgrade go1.24-docUpgrade go1.23Upgrade go1.23-openssl-raceUpgrade go1.24-openssl-doc | Dec 5, 2025 | Aug 12, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | May 27, 2026 | Sep 18, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub