The vulnerability of the Go programming language, related to improper validation of input data, allows attackers to exploit their privileges.

Go language vulnerability due to improper input validation enables remote attackers to gain elevated privileges.

Reporter	Title	Published	Views	Family All 711
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM MQ Operator and Queue manager container images	10 Dec 202516:39	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Maximo Application Suite uses os/exec 1.24.3; 1.24.4, ansible-9.4.0, github.com/eclipse/paho.mqtt.golang v1.3.5 and archive/tar 1.24.2; 1.24.4 which is vulnerable to CVE-2025-47906,CVE-2025-14010,CVE-2025-10543 and CVE-2025-58183	10 Mar 202608:18	–	ibm
IBM Security Bulletins	Security Bulletin: IBM App Connect Enterprise Certified Container is vulnerable to incorrect binary execution [CVE-2025-47906]	1 Oct 202515:27	–	ibm
Tenable Nessus	Amazon Linux 2023 : golang, golang-bin, golang-misc (ALAS2023-2025-1161)	8 Sep 202500:00	–	nessus
Tenable Nessus	Amazon Linux 2 : golang, --advisory ALAS2-2025-2984 (ALAS-2025-2984)	4 Sep 202500:00	–	nessus
Tenable Nessus	Alibaba Cloud Linux 3 : 0200: go-toolset:an8 (ALINUX3-SA-2025:0200)	29 Dec 202500:00	–	nessus
Tenable Nessus	AlmaLinux 9 : go-rpm-macros (ALSA-2025:22005)	25 Nov 202500:00	–	nessus
Tenable Nessus	AlmaLinux 8 : go-toolset:rhel8 (ALSA-2025:22668)	5 Dec 202500:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP12 : golang (EulerOS-SA-2025-2327)	12 Nov 202500:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP12 : golang (EulerOS-SA-2025-2358)	12 Nov 202500:00	–	nessus

Vulners

Node

go goRange<1.23.12

go goRange1.24.0–1.24.6

Source	Link
go	www.go.dev/cl/691775
go	www.go.dev/issue/74466
groups	www.groups.google.com/g/golang-announce/c/x5MKroML2yM
pkg	www.pkg.go.dev/vuln/GO-2025-3956
redos	www.redos.red-soft.ru/search/
web	www.web.nvd.nist.gov/view/vuln/detail

23 Jul 2026 00:00Current

6.3Medium risk

Vulners AI Score6.3

CVSS 26.4

CVSS 36.5

EPSS0.00489