Go toolchain cmd/compile vulnerabilities
5 published CVEs name Go toolchain cmd/compile among the affected products.
- 5Published CVEs2 of them scored
- 5Last 12 monthspublished in the last year
- 1Critical1 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-97041
Host linker flag injection via //go:cgo_* directives in cmd/compile and cmd/link
Go toolchain · cmd/compile
Not scored - CVE-2026-97042
Linker flag injection via cgo_import_dynamic and PE DLL names in cmd/cgo, cmd/compile, and cmd/link
Go toolchain · cmd/cgo
Not scored - CVE-2026-97043
Unexpected code execution via escaped quotes in //go:cgo_ldflag in cmd/go and cmd/compile
Go toolchain · cmd/go
Not scored - CVE-2026-27143
Missing bound checks can lead to memory corruption in safe Go in cmd/compile
Go toolchain · cmd/compile
Critical9.8 - CVE-2026-27144
Miscompilation allows memory corruption via CONVNOP-wrapped array copy in cmd/compile
Go toolchain · cmd/compile
High7.1