Approved changes feed: RSS · Atom

cpe:2.3:a:golang:go:1.19.0:-:*:*:*:*:*:*

part: a version: 1.19.0 update: -

VendorGolang (670356c5-bd1b-5c66-9eee-f755f5cec4c7)
ProductGo (96a6ef33-04c7-5363-bbc8-7d2a06bf0b4b)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/golang/go purl2cpe 2026-06-01 10:12:04.370247
pkg:golang/go/go purl2cpe 2026-06-01 10:12:04.370248
pkg:googlesource/go purl2cpe 2026-06-01 10:12:04.370250

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-32190 vulnerable 2026-06-03 14:47:20.876738 Failure to strip relative path components in net/url
JoinPath and URL.JoinPath do not remove ../ path elements appended to a relative path. For example, JoinPath("https://go.dev", "../go") returns the URL "https://go.dev/../go", despite the JoinPath documentation stating that ../ path elements are removed from the result.
Published: 2022-09-13T17:08:57.000Z
Updated: 2024-08-03T07:32:56.001Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.