EUVD-2024-22164

Malicious code in bioql PyPI...

BIT-GOLANG-2025-22867

On Darwin, building a Go module which contains CGO can trigger arbitrary code execution when using the Apple version of ld, due to usage of the @executablepath, @loaderpath, or @rpath special values in a "cgo LDFLAGS" directive. This issue only affected go1.24rc2...

CVE-2025-22867

Building a Go module containing CGO on Darwin can lead to arbitrary code execution when utilizing the Apple version of ld . This vulnerability is caused by the use of special values such as @executable_path, @loader_path, or @rpath within a "#cgo LDFLAGS" directive. The issue specifically affecte...

BIT-GOLANG-2024-24787 Arbitrary code execution during build on Darwin in cmd/go

On Darwin, building a Go module which contains CGO can trigger arbitrary code execution when using the Apple version of ld, due to usage of the -ltolibrary flag in a "cgo LDFLAGS" directive...

Golang < 1.21.10, 1.22.x < 1.22.3 Code Execution

The version of Golang running on the remote host is prior to 1.21.10 or 1.22.x prior to 1.22.3. It is, therefore, affected by a code execution vulnerability. On Darwin, building a Go module which contains CGO can trigger arbitrary code execution when using the Apple version of ld, due to usage of...