CVE-2017-15041

The CVE-2017-15041 entry concerns Go prior to 1.8.4 and 1.9.x prior to 1.9.1, where the go get command can lead to remote code execution via crafted repository structures (example.com/pkg1 pointing to a Subversion repo and pkg1/pkg2 to a Git repo). If the Subversion repo contains a Git checkout w...