SWIG file names containing 'cgo' and well-crafted payloads could lead to code smuggling and arbitrary code execution at build time due to trust layer bypass.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade golang-binUpgrade golang-docsUpgrade golang-miscUpgrade golang-testsUpgrade delveUpgrade golang-srcUpgrade go-toolsetUpgrade golang-raceUpgrade golang | Jul 23, 2026 | Apr 27, 2026 |
| Alpine Linux | — | Upgrade rcloneUpgrade go | Apr 13, 2026 | Apr 8, 2026 |
| Amazon Linux Ami 2 | — | Upgrade golang-sharedUpgrade golang-docsUpgrade golang-binUpgrade golang-testsUpgrade golangUpgrade golang-srcUpgrade golang-misc | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade golangUpgrade golang-testsUpgrade golang-miscUpgrade golang-docsUpgrade golang-srcUpgrade golang-binUpgrade golang-shared | May 4, 2026 | Apr 8, 2026 |
| Oracle_linux | — | Upgrade golang-srcUpgrade go-toolsetUpgrade golang-miscUpgrade golangUpgrade golang-binUpgrade delveUpgrade golang-docsUpgrade golang-raceUpgrade golang-tests | Apr 27, 2026 | Apr 8, 2026 |
| Redhat_linux | — | Upgrade golang-raceUpgrade golang-miscUpgrade go-toolsetUpgrade delve-debuginfoUpgrade golang-srcUpgrade delve-debugsourceNo solution existsUpgrade golang-docsUpgrade golang-binUpgrade golangUpgrade delveUpgrade golang-tests | May 8, 2026 | Apr 8, 2026 |
| Rocky_linux | — | Upgrade golang-binUpgrade delveUpgrade delve-debugsourceUpgrade delve-debuginfoUpgrade golang-raceUpgrade golangUpgrade go-toolset | May 11, 2026 | May 6, 2026 |
| Splunk | — | Upgrade Splunk Enterprise to version 10.0.8Upgrade Splunk Enterprise to version 9.4.14Upgrade Splunk Enterprise to version 10.4.1Upgrade Splunk Enterprise to version 10.2.6Upgrade Splunk Enterprise to version 9.4.13Upgrade Splunk Enterprise to version 10.2.5Upgrade Splunk Enterprise to version 10.0.9Upgrade Splunk Enterprise to version 10.4.2 | Jul 30, 2026 | Apr 8, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jun 15, 2026 | Apr 8, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub