Skip to main content
cve.nowby Sazabi
← Go
GoPackage

os/exec

3 known vulnerabilities (1 high, 2 medium), with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
3 · 1 high, 2 medium
Registry
pkg.go.dev

Advisories 3

  • CVE-2025-47906Medium 6.5

    Unexpected paths returned from LookPath in os/exec

    Affected: fixed in 1.23.12; from 1.24.0, fixed in 1.24.6.

  • CVE-2022-41716Medium 6.3

    Unsanitized NUL in environment variables on Windows in syscall and os/exec

    Affected: fixed in 1.18.8; from 1.19.0-0, fixed in 1.19.3.

  • Empty Cmd.Path can trigger unintended binary in os/exec on Windows

    Affected: fixed in 1.17.11; from 1.18.0-0, fixed in 1.18.3.