g
go
Security Risk Profile
44
/100
mediumSecurity Risk Score
Comprehensive risk assessment based on 66 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from July 7, 2022 to present
66
Total CVEs
28
Critical+High
1
Exploited
18
Unpatched
Threat Assessment
Avg CVSS
6.4
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
18
Critical/High
Risk Level
44/100
medium
⚠️ 1 Active Exploits🆕 1Fresh (<7d)📈 4 in Last 30 Days
Severity Distribution
Critical
2High
26Medium
21Low
0Exploit Likelihood
>50% chance
020-50%
05-20%
0<5%
4Age Distribution
Common Weaknesses (CWE)
1
Path Traversal
2
2
XSS
1
3
Integer Overflow
1
4
Code Injection
1
5
CSRF
1
Most Affected Products
1. Golang Go32
2. go Go18
3. go crypto/x5096
4. IBM Concert Software5
5. IBM Netezza Software5
Recent Vulnerabilities
See more →CVE-2026-56853
CVSS 7.5high
Apply ReadHeaderTimeout when doing unencrypted HTTP/2 check in net/http
Aug 13, 2026🔧 No Patch
CVE-2026-33818
CVSS 7.5high
Enforce maximum recursion depth in encoding/asn1
Aug 13, 2026🔧 No Patch
https://seclists.org/oss-sec/2026/q3/487
unknown
Go 1.26.6 and Go 1.25.13 aleased with 10 security fixes
Aug 13, 2026🔧 No Patch
CVE-2026-39822
CVSS 7.8high
Root escape via symlink plus trailing slash in os
Jul 8, 2026
REDHAT-BUG-2484207
CVSS 7.0high
Jun 2, 2026🔧 No Patch
CVE-2026-42504
CVSS 7.5high
Quadratic complexity in WordDecoder.DecodeHeader in mime
Jun 2, 2026
https://seclists.org/oss-sec/2026/q2/454
unknown
Go 1.26.3 and Go 1.25.10 aleased with 11 security fixes
May 8, 2026🔧 No Patch
REDHAT-BUG-2467823
CVSS 4.0medium
May 7, 2026🔧 No Patch
REDHAT-BUG-2467825
CVSS 4.0medium
May 7, 2026🔧 No Patch
REDHAT-BUG-2467822
CVSS 7.0high
May 7, 2026🔧 No Patch
Monitor go in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.