Golang Go
3 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2020-29509 | All versions | The encoding/xml package in Go (all versions) does not correctly preserve the semantics of attribute namespace prefixes during tokenization | CRITICAL 9.8 | 2.1 % | ||
| CVE-2020-29511 | All versions | The encoding/xml package in Go (all versions) does not correctly preserve the semantics of element namespace prefixes during tokenization ro | CRITICAL 9.8 | 2.0 % | ||
| CVE-2020-29510 | unspecified – 1.15 | The encoding/xml package in Go versions 1.15 and earlier does not correctly preserve the semantics of directives during tokenization round-t | CRITICAL 9.8 | 2.1 % |