If the PATH environment variable contains paths which are executables (rather than just directories), passing certain strings to LookPath ("", ".", and ".."), can result in the binaries listed in the PATH being unexpectedly returned.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade golang-testsUpgrade golang-raceUpgrade delveUpgrade go-srpm-macrosUpgrade go-filesystemUpgrade golang-binUpgrade go-rpm-macrosUpgrade go-rpm-templatesUpgrade golang-miscUpgrade golang-docsUpgrade golangUpgrade golang-srcUpgrade go-toolset | Nov 26, 2025 | Nov 25, 2025 |
| Alpine Linux | — | Upgrade go | Sep 19, 2025 | Sep 18, 2025 |
| Amazon Linux Ami 2 | — | Upgrade golang-testsUpgrade golangUpgrade golang-srcUpgrade golang-miscUpgrade golang-binUpgrade golang-sharedUpgrade golang-docs | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade golang-srcUpgrade golangUpgrade golang-testsUpgrade golang-miscUpgrade golang-docsUpgrade golang-sharedUpgrade golang-bin | Dec 4, 2025 | Sep 18, 2025 |
| Huawei Euleros 2_0_sp10 | — | Upgrade golang-helpUpgrade golangUpgrade golang-devel | Nov 12, 2025 | Nov 6, 2025 |
| Huawei Euleros 2_0_sp11 | — | Upgrade golang-develUpgrade golang-helpUpgrade golang | Dec 12, 2025 | Nov 6, 2025 |
| Huawei Euleros 2_0_sp12 | — | Upgrade golang-develUpgrade golangUpgrade golang-help | Nov 12, 2025 | Nov 6, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade golang-develUpgrade golangUpgrade golang-help | Nov 21, 2025 | Nov 6, 2025 |
| Oracle_linux | — | Upgrade golang-raceUpgrade go-filesystemUpgrade golang-docsUpgrade delveUpgrade golangUpgrade go-rpm-templatesUpgrade go-toolsetUpgrade golang-binUpgrade go-srpm-macrosUpgrade golang-srcUpgrade golang-testsUpgrade golang-miscUpgrade go-rpm-macros | Nov 28, 2025 | Sep 18, 2025 |
| Redhat_linux | — | Upgrade delve-debuginfoUpgrade golangUpgrade golang-binUpgrade go-filesystemUpgrade golang-srcUpgrade go-toolsetUpgrade golang-miscUpgrade go-rpm-macrosUpgrade golang-testsUpgrade delve-debugsourceUpgrade golang-raceUpgrade go-rpm-macros-debugsourceUpgrade delveUpgrade go-rpm-macros-debuginfoUpgrade go-srpm-macrosUpgrade go-rpm-templatesNo solution existsUpgrade golang-docs | Nov 14, 2025 | Sep 18, 2025 |
| Rocky_linux | — | Upgrade golang-binUpgrade go-filesystemUpgrade go-rpm-macrosUpgrade go-toolsetUpgrade go-rpm-macros-debuginfoUpgrade go-rpm-macros-debugsourceUpgrade delveUpgrade golang-raceUpgrade delve-debugsourceUpgrade golangUpgrade delve-debuginfo | Feb 5, 2026 | Dec 4, 2025 |
| Splunk | — | Upgrade Splunk Enterprise to version 10.0.3Upgrade Splunk Enterprise to version 9.4.9Upgrade Splunk Enterprise to version 10.0.4Upgrade Splunk Enterprise to version 10.2.1Upgrade Splunk Enterprise to version 9.3.9Upgrade Splunk Enterprise to version 9.3.10Upgrade Splunk Enterprise to version 9.4.8Upgrade Splunk Enterprise to version 9.2.12 | Jul 30, 2026 | Sep 18, 2025 |
| Suse | — | Upgrade go1.23-opensslUpgrade go1.23-raceUpgrade go1.25-openssl-raceUpgrade go1.24-openssl-raceUpgrade go1.24-libstdUpgrade go1.25-opensslUpgrade go1.24-opensslUpgrade go1.25-raceUpgrade go1.24-raceUpgrade go1.24Upgrade go1.25-docUpgrade go1.25Upgrade go1.24-openssl-docUpgrade go1.25-openssl-docUpgrade go1.23-openssl-raceUpgrade go1.23Upgrade go1.25-libstdUpgrade go1.24-docUpgrade go1.23-openssl-docUpgrade go1.23-doc | Dec 5, 2025 | Aug 12, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | May 27, 2026 | Sep 18, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub