[ Vendor · 2 CVEs ]
Go toolchain
CVEs affecting Go toolchain published in the last 30 days, plus any Go toolchain CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-94444 | 8 Oct 2026 | CVSS 7.8 | Go toolchain cmd/goPreviously, a user operating inside of a malicious Go project that defines a bogus golang.org/fips140 and operates a malicious GOMODPROXY the user… | |
| CVE-2026-94447 | 8 Oct 2026 | CVSS 7.8 | Go toolchain cmd/goPreviously, a user operating inside of a malicious Go project that defines a bogus golang.org/toolchain go.sum entry and operates a malicious… |