Threats affecting pkg:golang/github.com/golang/go

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
High	7.8	EPSS 0.2%	CVE-2026-39822Bundesamt für Sicherheit in der Informationstechnik Amazon · Golang Go: Mehrere Schwachstellen ermöglichen Offenlegung von Informationen High7.8EPSS 0.2%2026-07-07GCVE DatabaseCVE-2026-39822 A directory traversal vulnerability exists in the Go programming language's os.Root function due to symlink following, allowing potential information disclosure. This affects Go versions prior to 1.26.5. The issue has been fixed in version 1.26.5. The vulnerability is rated as important by Red Hat in their advisory for the buildah package, which uses Go. No known exploits are reported in the wild. EPSS 0.2%Report on CVE-2026-39822 Vulnerability #bundesamt-f-r-sicherheit-in-de	GCVE Database	2026-07-07

Page 1 of 1