Go toolchain
- Total products in the ecosystem
- 3
- Total vulnerabilities (90 days)
- 4
- Products & ServicesProducts & Services
- SolutionsSolutions
- PricingPricing
- CompanyCompany
- ResourcesResources
en
en
CyStack is analyzing this profile. More information will appear here when it is ready.
As of 10/27/2026, Go toolchain recorded 4 security vulnerabilities in the last 90 days across 1 products, including 4 rated High or above and 0 known exploited vulnerabilities (KEV) that should be prioritized for immediate remediation.
Over the last 90 days, cmd/go had the most security vulnerabilities in the Go toolchain ecosystem, with 4 vulnerabilities—approximately 100% of the provider's total vulnerabilities during this period.
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
CVE-2026-94447Checksum database bypass for golang.org/toolchain in cmd/goCVE-2026-94444Checksum bypass for golang.org/fips140 in cmd/goCVE-2026-56864Ignore unrelated, unauthenticated hashes in Lookup in golang.org/x/mod/sumdbCVE-2026-56865Fix transparency log tile verification bypass in golang.org/x/mod/sumdb/tlogCVE-2026-42501Malicious module proxy can bypass checksum database in cmd/go26 Results | Page 1 of 3
| SeverityHigh |
| SeverityHigh |
| SeverityHigh |
| SeverityHigh |
| SeverityMedium |
| SeverityMedium |
| SeverityCritical |
| SeverityCritical |
| SeverityHigh |