The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
On Unix platforms, when listing the contents of a directory using File.ReadDir or File.Readdir the returned FileInfo could reference a file outside of the Root in which the File was opened. The impact of this escape is limited to reading metadata provided by lstat from arbitrary locations on the filesystem without permitting reading or writing files outside the root.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade go | Mar 9, 2026 | Mar 6, 2026 |
| Amazon Linux Ami 2 | — | Upgrade golang-sharedUpgrade runcUpgrade amazon-cloudwatch-agentUpgrade golang-docsUpgrade amazon-ecr-credential-helper-debuginfoUpgrade oci-add-hooks-debuginfoUpgrade nerdctlUpgrade golang-binUpgrade runc-debuginfoUpgrade amazon-ecr-credential-helperUpgrade golist-debuginfoUpgrade containerd-stressUpgrade ecs-initUpgrade runfinch-finchUpgrade oci-add-hooksUpgrade golang-testsUpgrade containerdUpgrade soci-snapshotterUpgrade nerdctl-debuginfoUpgrade golang-srcUpgrade golang-miscUpgrade containerd-debuginfoUpgrade docker-debuginfoUpgrade dockerUpgrade golangUpgrade golist | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade runcUpgrade golang-github-burntsushi-toml-test-develUpgrade rclone-debuginfoUpgrade golang-github-burntsushi-toml-debuginfoUpgrade containerd-stressUpgrade golang-docsUpgrade docker-debugsourceUpgrade docker-debuginfoUpgrade rclone-debugsourceUpgrade runc-debugsourceUpgrade compat-golang-github-cpuguy83-md2man-2-develUpgrade golang-github-cpuguy83-md2man-debugsourceUpgrade golangUpgrade ecs-initUpgrade golang-github-cpuguy83-md2man-develUpgrade yq-debuginfoUpgrade golang-github-burntsushi-tomlUpgrade golang-github-burntsushi-toml-testUpgrade golang-github-cpuguy83-md2manUpgrade runfinch-finchUpgrade golist-debugsourceUpgrade amazon-ecr-credential-helperUpgrade golang-github-burntsushi-toml-debugsourceUpgrade golang-testsUpgrade containerd-debugsourceUpgrade golang-github-burntsushi-toml-develUpgrade containerd-stress-debuginfoUpgrade containerd-debuginfoUpgrade golang-srcUpgrade golang-sharedUpgrade golang-binUpgrade credentials-fetcherUpgrade yqUpgrade oci-add-hooks-debuginfoUpgrade soci-snapshotterUpgrade golist-debuginfoUpgrade containerdUpgrade golang-github-burntsushi-toml-test-debuginfoUpgrade golang-github-cpuguy83-md2man-debuginfoUpgrade dockerUpgrade rcloneUpgrade oci-add-hooks-debugsourceUpgrade golang-github-burntsushi-toml-test-debugsourceUpgrade yq-debugsourceUpgrade nerdctlUpgrade golistUpgrade runc-debuginfoUpgrade oci-add-hooksUpgrade amazon-cloudwatch-agentUpgrade golang-misc | Mar 27, 2026 | Mar 6, 2026 |
| Redhat_linux | — | No solution exists | Jul 17, 2026 | Mar 6, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jun 15, 2026 | Mar 6, 2026 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub