The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
On Unix platforms, when listing the contents of a directory using File.ReadDir or File.Readdir the returned FileInfo could reference a file outside of the Root in which the File was opened. The impact of this escape is limited to reading metadata provided by lstat from arbitrary locations on the filesystem without permitting reading or writing files outside the root.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade go | Mar 9, 2026 | Mar 6, 2026 |
| Amazon Linux Ami 2 | — | Upgrade nerdctl-debuginfoUpgrade soci-snapshotterUpgrade containerdUpgrade golang-testsUpgrade golang-miscUpgrade oci-add-hooksUpgrade dockerUpgrade golistUpgrade docker-debuginfoUpgrade golang-srcUpgrade containerd-debuginfoUpgrade golangUpgrade golang-sharedUpgrade runc-debuginfoUpgrade runfinch-finchUpgrade golang-binUpgrade ecs-initUpgrade amazon-cloudwatch-agentUpgrade amazon-ecr-credential-helper-debuginfoUpgrade amazon-ecr-credential-helperUpgrade containerd-stressUpgrade golist-debuginfoUpgrade oci-add-hooks-debuginfoUpgrade runcUpgrade golang-docsUpgrade nerdctl | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade rcloneUpgrade dockerUpgrade oci-add-hooks-debugsourceUpgrade golang-github-cpuguy83-md2man-debuginfoUpgrade golang-github-burntsushi-toml-test-debuginfoUpgrade golang-github-burntsushi-toml-test-debugsourceUpgrade containerd-debuginfoUpgrade containerd-stress-debuginfoUpgrade golist-debugsourceUpgrade golang-binUpgrade golang-sharedUpgrade runc-debuginfoUpgrade golist-debuginfoUpgrade golang-testsUpgrade amazon-ecr-credential-helperUpgrade credentials-fetcherUpgrade golang-srcUpgrade amazon-cloudwatch-agentUpgrade golang-miscUpgrade containerd-debugsourceUpgrade golistUpgrade nerdctlUpgrade containerdUpgrade golang-github-burntsushi-toml-debugsourceUpgrade soci-snapshotterUpgrade yqUpgrade oci-add-hooks-debuginfoUpgrade golang-github-burntsushi-toml-develUpgrade oci-add-hooksUpgrade yq-debugsourceUpgrade golang-github-burntsushi-toml-testUpgrade yq-debuginfoUpgrade compat-golang-github-cpuguy83-md2man-2-develUpgrade golang-docsUpgrade docker-debugsourceUpgrade runcUpgrade runc-debugsourceUpgrade docker-debuginfoUpgrade ecs-initUpgrade runfinch-finchUpgrade golang-github-cpuguy83-md2manUpgrade golang-github-burntsushi-toml-debuginfoUpgrade containerd-stressUpgrade rclone-debugsourceUpgrade golang-github-cpuguy83-md2man-develUpgrade rclone-debuginfoUpgrade golang-github-burntsushi-toml-test-develUpgrade golang-github-cpuguy83-md2man-debugsourceUpgrade golang-github-burntsushi-tomlUpgrade golang | Mar 27, 2026 | Mar 6, 2026 |
| Redhat_linux | — | No solution exists | Jul 17, 2026 | Mar 6, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jun 15, 2026 | Mar 6, 2026 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub