SWIG file names containing 'cgo' and well-crafted payloads could lead to code smuggling and arbitrary code execution at build time due to trust layer bypass.
References
Configurations
History
25 Jul 2026, 11:10
| Type | Values Removed | Values Added |
|---|---|---|
| Summary |
|
09 Jul 2026, 13:16
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
30 Jun 2026, 03:17
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-641 | |
| References |
|
17 Jun 2026, 10:26
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU - Mailing List, Release Notes |
16 Apr 2026, 19:26
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-863 | |
| References | () https://go.dev/cl/763768 - Release Notes | |
| References | () https://go.dev/issue/78335 - Issue Tracking | |
| References | () https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU - Release Notes, Mailing List | |
| References | () https://pkg.go.dev/vuln/GO-2026-4871 - Vendor Advisory | |
| First Time |
Golang go
Golang |
|
| CPE | cpe:2.3:a:golang:go:*:*:*:*:*:*:*:* |
13 Apr 2026, 14:16
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 8.8 |
08 Apr 2026, 02:16
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2026-04-08 02:16
Updated : 2026-07-25 11:10
NVD link : CVE-2026-27140
Mitre link : CVE-2026-27140
CVE.ORG link : CVE-2026-27140
JSON object : View
Products Affected
golang
- go
