JoinPath and URL.JoinPath do not remove ../ path elements appended to a relative path. For example, JoinPath("https://go.dev", "../go") returns the URL "https://go.dev/../go", despite the JoinPath documentation stating that ../ path elements are removed from the result.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | alpine-linux-upgrade-go | Aug 22, 2024 | Sep 13, 2022 | |
| Amazon_linux_2023 | amazon-linux-2023-upgrade-golangamazon-linux-2023-upgrade-golang-binamazon-linux-2023-upgrade-golang-docsamazon-linux-2023-upgrade-golang-miscamazon-linux-2023-upgrade-golang-raceamazon-linux-2023-upgrade-golang-sharedamazon-linux-2023-upgrade-golang-srcamazon-linux-2023-upgrade-golang-tests | Feb 17, 2025 | Sep 6, 2022 | |
| Debian | debian-upgrade-golang-1-19 | Jul 30, 2024 | Sep 13, 2022 | |
| Freebsd | freebsd-upgrade-package-go118freebsd-upgrade-package-go119 | Nov 4, 2022 | Sep 7, 2022 | |
| Gentoo Linux | gentoo-linux-upgrade-dev-lang-go | Sep 30, 2022 | Sep 13, 2022 | |
| Oracle_linux | — | oracle-linux-upgrade-delveoracle-linux-upgrade-golangoracle-linux-upgrade-golang-binoracle-linux-upgrade-golang-docsoracle-linux-upgrade-golang-miscoracle-linux-upgrade-golang-raceoracle-linux-upgrade-golang-srcoracle-linux-upgrade-golang-testsoracle-linux-upgrade-go-toolset | Mar 8, 2023 | Sep 6, 2022 |
| Redhat Openshift | linuxrpm-upgrade-atomic-openshift-service-idlerlinuxrpm-upgrade-buildahlinuxrpm-upgrade-containers-commonlinuxrpm-upgrade-kernellinuxrpm-upgrade-kernel-rtlinuxrpm-upgrade-openshift-clientslinuxrpm-upgrade-openshift-kuryrlinuxrpm-upgrade-ovn22-12linuxrpm-upgrade-podmanlinuxrpm-upgrade-runclinuxrpm-upgrade-skopeo | Jan 26, 2023 | Sep 13, 2022 | |
| Suse | — | suse-upgrade-go1-19suse-upgrade-go1-19-docsuse-upgrade-go1-19-race | Oct 26, 2022 | Sep 13, 2022 |
| Vmware Photon_os | vmware-photon_os_update_tdnf | Jun 15, 2026 | Sep 13, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub