OAPI Codegen code injection vulnerability

Versions prior to 2.8.1 of oapi-codegen contain a code injection vulnerability. This vulnerability arises because the server-urls template fails to escape the servers.x-go-name value, allowing attackers to inject Go code. When the victim builds and imports the generated package, the injected func...

Google Go security vulnerabilities

Google Go is a static strongly typed, compiled, concatenated, and garbage-collected programming language from Google. A code execution vulnerability exists in Google Go due to unsafe handling of compiler flags in CgoPkgConfig. An attacker can exploit the vulnerability to execute arbitrary code on...