AZL-47227 CVE-2022-41722 affecting package golang for versions less than 1.22.7-2

🗓️ 28 Feb 2023 18:15:09Reported by GoogleType

osv🔗 osv.dev👁 1 Views

Windows path traversal in Go library due to filepath.Clean on older versions; fix prevents invalid paths from becoming absolute.

Reporter	Title	Published	Views	Family All 104
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Pypa Setuptools, Golang Go, OpenSSH, Minio and Certifi may affect IBM Spectrum Protect Plus Container backup and restore for Kubernetes and OpenShift	26 Mar 202503:37	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Assistant for IBM Cloud Pak for Data is affected by multiple vulnerabilities in Golang Go	5 Jul 202321:52	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Observability with Instana for Self-Hosted Standard Edition is affected by Multiple Security Vulnerabilities	17 Oct 202408:51	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Golang, Python, postgresql, cURL libcurl might affect IBM Spectrum Copy Data Management	16 Jun 202319:25	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Apache Commons, Tomcat, Go, libcurl, OpenSSL, Python, Node.js, and Linux can affect IBM Spectrum Protect Plus.	20 Jun 202316:49	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Discovery Cartridge for IBM Cloud Pak for Data affected by vulnerability in Golang Go	28 Jun 202320:59	–	ibm
FreeBSD	go -- multiple vulnerabilities	14 Feb 202300:00	–	freebsd
Tenable Nessus	Amazon Linux 2023 : golang, golang-bin, golang-misc (ALAS2023-2023-175)	3 May 202300:00	–	nessus
Tenable Nessus	Amazon Linux 2 : golang, --advisory ALAS2-2023-2015 (ALAS-2023-2015)	20 Apr 202300:00	–	nessus
Tenable Nessus	Amazon Linux 2 : golang (ALASGOLANG1.19-2023-002)	27 Sep 202300:00	–	nessus

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2022-41722

21 Apr 2026 04:32Current

6.9Medium risk

Vulners AI Score6.9

CVSS 3.17.5

EPSS0.00333