CVE-2025-47906 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

If the PATH environment variable contains paths which are executables (rather than just directories), passing certain strings to LookPath ("", ".", and ".."), c…
Medium CVSS: 6.5

CVE-2025-47906

If the PATH environment variable contains paths which are executables (rather than just directories), passing certain strings to LookPath ("", ".", and ".."), can result in the binaries listed in the PATH being unexpectedly returned.
Vendor
Golang
Product
Go
CWE
NVD-CWE-Other
Yayın Tarihi
2025-09-18 19:15:37
Güncelleme
2026-01-27 19:56:17
Source Identifier
security@golang.org
KEV Date Added
-

Kategoriler

NVD-CWE-Other Go MEDIUM Golang 2025

Referanslar

https://go.dev/cl/691775 https://go.dev/issue/74466 https://groups.google.com/g/golang-announce/c/x5MKroML2yM https://pkg.go.dev/vuln/GO-2025-3956 http://www.openwall.com/lists/oss-security/2025/08/06/1