Approved changes feed: RSS · Atom

cpe:2.3:a:golang:go:1.21.0:-:*:*:*:*:*:*

part: a version: 1.21.0 update: -

VendorGolang (670356c5-bd1b-5c66-9eee-f755f5cec4c7)
ProductGo (96a6ef33-04c7-5363-bbc8-7d2a06bf0b4b)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/golang/go purl2cpe 2026-06-01 10:12:04.370394
pkg:golang/go/go purl2cpe 2026-06-01 10:12:04.370396
pkg:googlesource/go purl2cpe 2026-06-01 10:12:04.370397

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-24787 vulnerable 2026-06-03 14:55:05.769947 Arbitrary code execution during build on Darwin in cmd/go
On Darwin, building a Go module which contains CGO can trigger arbitrary code execution when using the Apple version of ld, due to usage of the -lto_library flag in a "#cgo LDFLAGS" directive.
Published: 2024-05-08T15:31:14.530Z
Updated: 2025-02-13T17:40:26.439Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.