Approved changes feed: RSS · Atom

cpe:2.3:a:godoc:go_doc_dot_org:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorGodoc (46a538d5-227c-5394-b6ff-9490cdcceb9b)
ProductGo Doc Dot Org (2ffbb24d-5695-598b-8c38-e0ee8afb1095)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/golang/gddo purl2cpe 2026-06-01 10:16:47.541576
pkg:rpm/fedora/golang-github-gddo purl2cpe 2026-06-01 10:16:47.541579

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2018-12976 vulnerable 2026-06-08 05:10:42.168186 Details available
In Go Doc Dot Org (gddo) through 2018-06-27, an attacker could use specially crafted <go-import> tags in packages being fetched by gddo to cause a directory traversal and remote code execution.
Published: 2018-07-05T18:00:00.000Z
Updated: 2024-08-05T08:52:49.219Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.