{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/64832?format=json","vulnerability_id":"VCID-csmt-e61b-tued","summary":"cmd/go: cmd/go: Arbitrary file write via malicious pkg-config directive","aliases":[{"alias":"CVE-2025-61731"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/1081648?format=json","purl":"pkg:apk/alpine/etcd@3.6.8-r0?arch=ppc64le&distroversion=edge&reponame=community","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:apk/alpine/etcd@3.6.8-r0%3Farch=ppc64le&distroversion=edge&reponame=community"},{"url":"http://public2.vulnerablecode.io/api/packages/1081651?format=json","purl":"pkg:apk/alpine/etcd@3.6.8-r0?arch=x86&distroversion=edge&reponame=community","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:apk/alpine/etcd@3.6.8-r0%3Farch=x86&distroversion=edge&reponame=community"},{"url":"http://public2.vulnerablecode.io/api/packages/1081690?format=json","purl":"pkg:apk/alpine/etcd@3.6.8-r0?arch=armhf&distroversion=v3.23&reponame=community","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:apk/alpine/etcd@3.6.8-r0%3Farch=armhf&distroversion=v3.23&reponame=community"},{"url":"http://public2.vulnerablecode.io/api/packages/1081691?format=json","purl":"pkg:apk/alpine/etcd@3.6.8-r0?arch=armv7&distroversion=v3.23&reponame=community","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:apk/alpine/etcd@3.6.8-r0%3Farch=armv7&distroversion=v3.23&reponame=community"},{"url":"http://public2.vulnerablecode.io/api/packages/1081692?format=json","purl":"pkg:apk/alpine/etcd@3.6.8-r0?arch=loongarch64&distroversion=v3.23&reponame=community","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:apk/alpine/etcd@3.6.8-r0%3Farch=loongarch64&distroversion=v3.23&reponame=community"},{"url":"http://public2.vulnerablecode.io/api/packages/1081693?format=json","purl":"pkg:apk/alpine/etcd@3.6.8-r0?arch=ppc64le&distroversion=v3.23&reponame=community","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:apk/alpine/etcd@3.6.8-r0%3Farch=ppc64le&distroversion=v3.23&reponame=community"},{"url":"http://public2.vulnerablecode.io/api/packages/1081644?format=json","purl":"pkg:apk/alpine/etcd@3.6.8-r0?arch=aarch64&distroversion=edge&reponame=community","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:apk/alpine/etcd@3.6.8-r0%3Farch=aarch64&distroversion=edge&reponame=community"},{"url":"http://public2.vulnerablecode.io/api/packages/1081649?format=json","purl":"pkg:apk/alpine/etcd@3.6.8-r0?arch=riscv64&distroversion=edge&reponame=community","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:apk/alpine/etcd@3.6.8-r0%3Farch=riscv64&distroversion=edge&reponame=community"},{"url":"http://public2.vulnerablecode.io/api/packages/1081650?format=json","purl":"pkg:apk/alpine/etcd@3.6.8-r0?arch=s390x&distroversion=edge&reponame=community","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:apk/alpine/etcd@3.6.8-r0%3Farch=s390x&distroversion=edge&reponame=community"},{"url":"http://public2.vulnerablecode.io/api/packages/1081646?format=json","purl":"pkg:apk/alpine/etcd@3.6.8-r0?arch=armv7&distroversion=edge&reponame=community","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:apk/alpine/etcd@3.6.8-r0%3Farch=armv7&distroversion=edge&reponame=community"},{"url":"http://public2.vulnerablecode.io/api/packages/1081694?format=json","purl":"pkg:apk/alpine/etcd@3.6.8-r0?arch=riscv64&distroversion=v3.23&reponame=community","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:apk/alpine/etcd@3.6.8-r0%3Farch=riscv64&distroversion=v3.23&reponame=community"},{"url":"http://public2.vulnerablecode.io/api/packages/1081695?format=json","purl":"pkg:apk/alpine/etcd@3.6.8-r0?arch=s390x&distroversion=v3.23&reponame=community","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:apk/alpine/etcd@3.6.8-r0%3Farch=s390x&distroversion=v3.23&reponame=community"},{"url":"http://public2.vulnerablecode.io/api/packages/1081697?format=json","purl":"pkg:apk/alpine/etcd@3.6.8-r0?arch=x86_64&distroversion=v3.23&reponame=community","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:apk/alpine/etcd@3.6.8-r0%3Farch=x86_64&distroversion=v3.23&reponame=community"},{"url":"http://public2.vulnerablecode.io/api/packages/1081645?format=json","purl":"pkg:apk/alpine/etcd@3.6.8-r0?arch=armhf&distroversion=edge&reponame=community","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:apk/alpine/etcd@3.6.8-r0%3Farch=armhf&distroversion=edge&reponame=community"},{"url":"http://public2.vulnerablecode.io/api/packages/1081647?format=json","purl":"pkg:apk/alpine/etcd@3.6.8-r0?arch=loongarch64&distroversion=edge&reponame=community","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:apk/alpine/etcd@3.6.8-r0%3Farch=loongarch64&distroversion=edge&reponame=community"},{"url":"http://public2.vulnerablecode.io/api/packages/1081696?format=json","purl":"pkg:apk/alpine/etcd@3.6.8-r0?arch=x86&distroversion=v3.23&reponame=community","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:apk/alpine/etcd@3.6.8-r0%3Farch=x86&distroversion=v3.23&reponame=community"},{"url":"http://public2.vulnerablecode.io/api/packages/1081652?format=json","purl":"pkg:apk/alpine/etcd@3.6.8-r0?arch=x86_64&distroversion=edge&reponame=community","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:apk/alpine/etcd@3.6.8-r0%3Farch=x86_64&distroversion=edge&reponame=community"},{"url":"http://public2.vulnerablecode.io/api/packages/1081689?format=json","purl":"pkg:apk/alpine/etcd@3.6.8-r0?arch=aarch64&distroversion=v3.23&reponame=community","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:apk/alpine/etcd@3.6.8-r0%3Farch=aarch64&distroversion=v3.23&reponame=community"},{"url":"http://public2.vulnerablecode.io/api/packages/488652?format=json","purl":"pkg:apk/alpine/go@1.24.12-r0?arch=ppc64le&distroversion=v3.22&reponame=community","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:apk/alpine/go@1.24.12-r0%3Farch=ppc64le&distroversion=v3.22&reponame=community"},{"url":"http://public2.vulnerablecode.io/api/packages/488653?format=json","purl":"pkg:apk/alpine/go@1.24.12-r0?arch=riscv64&distroversion=v3.22&reponame=community","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:apk/alpine/go@1.24.12-r0%3Farch=riscv64&distroversion=v3.22&reponame=community"},{"url":"http://public2.vulnerablecode.io/api/packages/488654?format=json","purl":"pkg:apk/alpine/go@1.24.12-r0?arch=s390x&distroversion=v3.22&reponame=community","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:apk/alpine/go@1.24.12-r0%3Farch=s390x&distroversion=v3.22&reponame=community"},{"url":"http://public2.vulnerablecode.io/api/packages/488648?format=json","purl":"pkg:apk/alpine/go@1.24.12-r0?arch=aarch64&distroversion=v3.22&reponame=community","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:apk/alpine/go@1.24.12-r0%3Farch=aarch64&distroversion=v3.22&reponame=community"},{"url":"http://public2.vulnerablecode.io/api/packages/488655?format=json","purl":"pkg:apk/alpine/go@1.24.12-r0?arch=x86&distroversion=v3.22&reponame=community","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:apk/alpine/go@1.24.12-r0%3Farch=x86&distroversion=v3.22&reponame=community"},{"url":"http://public2.vulnerablecode.io/api/packages/488656?format=json","purl":"pkg:apk/alpine/go@1.24.12-r0?arch=x86_64&distroversion=v3.22&reponame=community","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:apk/alpine/go@1.24.12-r0%3Farch=x86_64&distroversion=v3.22&reponame=community"},{"url":"http://public2.vulnerablecode.io/api/packages/488649?format=json","purl":"pkg:apk/alpine/go@1.24.12-r0?arch=armhf&distroversion=v3.22&reponame=community","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:apk/alpine/go@1.24.12-r0%3Farch=armhf&distroversion=v3.22&reponame=community"},{"url":"http://public2.vulnerablecode.io/api/packages/488651?format=json","purl":"pkg:apk/alpine/go@1.24.12-r0?arch=loongarch64&distroversion=v3.22&reponame=community","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:apk/alpine/go@1.24.12-r0%3Farch=loongarch64&distroversion=v3.22&reponame=community"},{"url":"http://public2.vulnerablecode.io/api/packages/488650?format=json","purl":"pkg:apk/alpine/go@1.24.12-r0?arch=armv7&distroversion=v3.22&reponame=community","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:apk/alpine/go@1.24.12-r0%3Farch=armv7&distroversion=v3.22&reponame=community"},{"url":"http://public2.vulnerablecode.io/api/packages/427816?format=json","purl":"pkg:apk/alpine/go@1.25.6-r0?arch=loongarch64&distroversion=edge&reponame=community","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:apk/alpine/go@1.25.6-r0%3Farch=loongarch64&distroversion=edge&reponame=community"},{"url":"http://public2.vulnerablecode.io/api/packages/463577?format=json","purl":"pkg:apk/alpine/go@1.25.6-r0?arch=riscv64&distroversion=v3.23&reponame=community","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:apk/alpine/go@1.25.6-r0%3Farch=riscv64&distroversion=v3.23&reponame=community"},{"url":"http://public2.vulnerablecode.io/api/packages/463578?format=json","purl":"pkg:apk/alpine/go@1.25.6-r0?arch=s390x&distroversion=v3.23&reponame=community","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:apk/alpine/go@1.25.6-r0%3Farch=s390x&distroversion=v3.23&reponame=community"},{"url":"http://public2.vulnerablecode.io/api/packages/463579?format=json","purl":"pkg:apk/alpine/go@1.25.6-r0?arch=x86&distroversion=v3.23&reponame=community","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:apk/alpine/go@1.25.6-r0%3Farch=x86&distroversion=v3.23&reponame=community"},{"url":"http://public2.vulnerablecode.io/api/packages/427820?format=json","purl":"pkg:apk/alpine/go@1.25.6-r0?arch=x86&distroversion=edge&reponame=community","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:apk/alpine/go@1.25.6-r0%3Farch=x86&distroversion=edge&reponame=community"},{"url":"http://public2.vulnerablecode.io/api/packages/463575?format=json","purl":"pkg:apk/alpine/go@1.25.6-r0?arch=loongarch64&distroversion=v3.23&reponame=community","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:apk/alpine/go@1.25.6-r0%3Farch=loongarch64&distroversion=v3.23&reponame=community"},{"url":"http://public2.vulnerablecode.io/api/packages/463576?format=json","purl":"pkg:apk/alpine/go@1.25.6-r0?arch=ppc64le&distroversion=v3.23&reponame=community","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:apk/alpine/go@1.25.6-r0%3Farch=ppc64le&distroversion=v3.23&reponame=community"},{"url":"http://public2.vulnerablecode.io/api/packages/427815?format=json","purl":"pkg:apk/alpine/go@1.25.6-r0?arch=armv7&distroversion=edge&reponame=community","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:apk/alpine/go@1.25.6-r0%3Farch=armv7&distroversion=edge&reponame=community"},{"url":"http://public2.vulnerablecode.io/api/packages/427818?format=json","purl":"pkg:apk/alpine/go@1.25.6-r0?arch=riscv64&distroversion=edge&reponame=community","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:apk/alpine/go@1.25.6-r0%3Farch=riscv64&distroversion=edge&reponame=community"},{"url":"http://public2.vulnerablecode.io/api/packages/463574?format=json","purl":"pkg:apk/alpine/go@1.25.6-r0?arch=armv7&distroversion=v3.23&reponame=community","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:apk/alpine/go@1.25.6-r0%3Farch=armv7&distroversion=v3.23&reponame=community"},{"url":"http://public2.vulnerablecode.io/api/packages/463572?format=json","purl":"pkg:apk/alpine/go@1.25.6-r0?arch=aarch64&distroversion=v3.23&reponame=community","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:apk/alpine/go@1.25.6-r0%3Farch=aarch64&distroversion=v3.23&reponame=community"},{"url":"http://public2.vulnerablecode.io/api/packages/427814?format=json","purl":"pkg:apk/alpine/go@1.25.6-r0?arch=armhf&distroversion=edge&reponame=community","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:apk/alpine/go@1.25.6-r0%3Farch=armhf&distroversion=edge&reponame=community"},{"url":"http://public2.vulnerablecode.io/api/packages/427821?format=json","purl":"pkg:apk/alpine/go@1.25.6-r0?arch=x86_64&distroversion=edge&reponame=community","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:apk/alpine/go@1.25.6-r0%3Farch=x86_64&distroversion=edge&reponame=community"},{"url":"http://public2.vulnerablecode.io/api/packages/463580?format=json","purl":"pkg:apk/alpine/go@1.25.6-r0?arch=x86_64&distroversion=v3.23&reponame=community","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:apk/alpine/go@1.25.6-r0%3Farch=x86_64&distroversion=v3.23&reponame=community"},{"url":"http://public2.vulnerablecode.io/api/packages/427817?format=json","purl":"pkg:apk/alpine/go@1.25.6-r0?arch=ppc64le&distroversion=edge&reponame=community","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:apk/alpine/go@1.25.6-r0%3Farch=ppc64le&distroversion=edge&reponame=community"},{"url":"http://public2.vulnerablecode.io/api/packages/463573?format=json","purl":"pkg:apk/alpine/go@1.25.6-r0?arch=armhf&distroversion=v3.23&reponame=community","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:apk/alpine/go@1.25.6-r0%3Farch=armhf&distroversion=v3.23&reponame=community"},{"url":"http://public2.vulnerablecode.io/api/packages/427813?format=json","purl":"pkg:apk/alpine/go@1.25.6-r0?arch=aarch64&distroversion=edge&reponame=community","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:apk/alpine/go@1.25.6-r0%3Farch=aarch64&distroversion=edge&reponame=community"},{"url":"http://public2.vulnerablecode.io/api/packages/427819?format=json","purl":"pkg:apk/alpine/go@1.25.6-r0?arch=s390x&distroversion=edge&reponame=community","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:apk/alpine/go@1.25.6-r0%3Farch=s390x&distroversion=edge&reponame=community"},{"url":"http://public2.vulnerablecode.io/api/packages/994466?format=json","purl":"pkg:deb/debian/golang-1.24@1.24.9-1","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/golang-1.24@1.24.9-1"},{"url":"http://public2.vulnerablecode.io/api/packages/923844?format=json","purl":"pkg:deb/debian/golang-1.24@1.24.12-1?distro=trixie","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/golang-1.24@1.24.12-1%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/923835?format=json","purl":"pkg:deb/debian/golang-1.24@1.24.13-2?distro=trixie","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/golang-1.24@1.24.13-2%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/923849?format=json","purl":"pkg:deb/debian/golang-1.25@1.25.6-1?distro=sid","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/golang-1.25@1.25.6-1%3Fdistro=sid"},{"url":"http://public2.vulnerablecode.io/api/packages/923846?format=json","purl":"pkg:deb/debian/golang-1.25@1.25.8-1?distro=sid","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-245f-jhkn-w3ck"},{"vulnerability":"VCID-91yp-p6st-8ucd"},{"vulnerability":"VCID-ju53-xpej-3qca"},{"vulnerability":"VCID-s176-xcrb-e3ea"},{"vulnerability":"VCID-svbs-h3y5-wfbn"},{"vulnerability":"VCID-t19m-gs1u-rbfp"},{"vulnerability":"VCID-tf52-aa91-4kf3"},{"vulnerability":"VCID-tmb1-tq9e-puhd"},{"vulnerability":"VCID-vw1r-8zev-ykf4"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/golang-1.25@1.25.8-1%3Fdistro=sid"},{"url":"http://public2.vulnerablecode.io/api/packages/1059618?format=json","purl":"pkg:deb/debian/golang-1.25@1.25.9-1?distro=sid","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-1642-htyj-kubr"},{"vulnerability":"VCID-6b34-5hez-8yf2"},{"vulnerability":"VCID-ant6-bm7n-c3hm"},{"vulnerability":"VCID-fhzp-yggw-s7au"},{"vulnerability":"VCID-hast-jk42-g3da"},{"vulnerability":"VCID-juan-6myp-7ydh"},{"vulnerability":"VCID-m44c-grtm-kkfk"},{"vulnerability":"VCID-r36g-6m47-g3f3"},{"vulnerability":"VCID-s3z8-q5kr-yfe7"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/golang-1.25@1.25.9-1%3Fdistro=sid"},{"url":"http://public2.vulnerablecode.io/api/packages/1105250?format=json","purl":"pkg:deb/debian/golang-1.25@1.25.10-1?distro=sid","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/golang-1.25@1.25.10-1%3Fdistro=sid"}],"affected_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/994465?format=json","purl":"pkg:deb/debian/golang-1.24@1.24.4-1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-1aty-87pz-5yb8"},{"vulnerability":"VCID-254d-pjst-c7hx"},{"vulnerability":"VCID-3nqb-6mna-jyb4"},{"vulnerability":"VCID-5n8q-zcds-gyen"},{"vulnerability":"VCID-5q9b-a7c4-1yht"},{"vulnerability":"VCID-7n3z-vwk2-3ydr"},{"vulnerability":"VCID-9ky3-s2vk-cuge"},{"vulnerability":"VCID-br2f-7ux9-hkhg"},{"vulnerability":"VCID-bv1f-bee8-cbek"},{"vulnerability":"VCID-csmt-e61b-tued"},{"vulnerability":"VCID-dp1t-v58b-43du"},{"vulnerability":"VCID-dtt9-gmqf-nbaf"},{"vulnerability":"VCID-eyev-qpgs-hfbx"},{"vulnerability":"VCID-hay4-q9m3-ekdj"},{"vulnerability":"VCID-je6z-v5qw-ufew"},{"vulnerability":"VCID-mvsr-c2yh-mbdq"},{"vulnerability":"VCID-q9yj-ze4x-qyfr"},{"vulnerability":"VCID-rvbr-nser-sfe7"},{"vulnerability":"VCID-sb3w-x3yv-ffft"},{"vulnerability":"VCID-t2dr-6dz3-7qgt"},{"vulnerability":"VCID-usyf-s559-pkgx"},{"vulnerability":"VCID-wchc-as62-1fae"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/golang-1.24@1.24.4-1"},{"url":"http://public2.vulnerablecode.io/api/packages/923837?format=json","purl":"pkg:deb/debian/golang-1.24@1.24.4-1?distro=trixie","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-1aty-87pz-5yb8"},{"vulnerability":"VCID-254d-pjst-c7hx"},{"vulnerability":"VCID-3nqb-6mna-jyb4"},{"vulnerability":"VCID-5n8q-zcds-gyen"},{"vulnerability":"VCID-5q9b-a7c4-1yht"},{"vulnerability":"VCID-7n3z-vwk2-3ydr"},{"vulnerability":"VCID-9ky3-s2vk-cuge"},{"vulnerability":"VCID-br2f-7ux9-hkhg"},{"vulnerability":"VCID-bv1f-bee8-cbek"},{"vulnerability":"VCID-csmt-e61b-tued"},{"vulnerability":"VCID-dp1t-v58b-43du"},{"vulnerability":"VCID-dtt9-gmqf-nbaf"},{"vulnerability":"VCID-eyev-qpgs-hfbx"},{"vulnerability":"VCID-hay4-q9m3-ekdj"},{"vulnerability":"VCID-je6z-v5qw-ufew"},{"vulnerability":"VCID-mvsr-c2yh-mbdq"},{"vulnerability":"VCID-q9yj-ze4x-qyfr"},{"vulnerability":"VCID-rvbr-nser-sfe7"},{"vulnerability":"VCID-sb3w-x3yv-ffft"},{"vulnerability":"VCID-t2dr-6dz3-7qgt"},{"vulnerability":"VCID-usyf-s559-pkgx"},{"vulnerability":"VCID-wchc-as62-1fae"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/golang-1.24@1.24.4-1%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/1066741?format=json","purl":"pkg:rpm/redhat/golang@1.17.13-11?arch=el9_0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-csmt-e61b-tued"},{"vulnerability":"VCID-pcez-y67t-8yg3"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/golang@1.17.13-11%3Farch=el9_0"},{"url":"http://public2.vulnerablecode.io/api/packages/1066744?format=json","purl":"pkg:rpm/redhat/golang@1.19.13-24?arch=el9_2","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-csmt-e61b-tued"},{"vulnerability":"VCID-pcez-y67t-8yg3"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/golang@1.19.13-24%3Farch=el9_2"},{"url":"http://public2.vulnerablecode.io/api/packages/1066739?format=json","purl":"pkg:rpm/redhat/golang@1.21.13-15?arch=el9_4","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-csmt-e61b-tued"},{"vulnerability":"VCID-pcez-y67t-8yg3"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/golang@1.21.13-15%3Farch=el9_4"},{"url":"http://public2.vulnerablecode.io/api/packages/86928?format=json","purl":"pkg:rpm/redhat/golang@1.25.8-1?arch=el9_7","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-csmt-e61b-tued"},{"vulnerability":"VCID-pcez-y67t-8yg3"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/golang@1.25.8-1%3Farch=el9_7"},{"url":"http://public2.vulnerablecode.io/api/packages/86925?format=json","purl":"pkg:rpm/redhat/golang@1.25.8-1?arch=el10_1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-csmt-e61b-tued"},{"vulnerability":"VCID-pcez-y67t-8yg3"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/golang@1.25.8-1%3Farch=el10_1"},{"url":"http://public2.vulnerablecode.io/api/packages/86926?format=json","purl":"pkg:rpm/redhat/golang@1.25.8-1?arch=el9_6","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-csmt-e61b-tued"},{"vulnerability":"VCID-pcez-y67t-8yg3"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/golang@1.25.8-1%3Farch=el9_6"},{"url":"http://public2.vulnerablecode.io/api/packages/86927?format=json","purl":"pkg:rpm/redhat/golang@1.25.8-1?arch=el10_0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-csmt-e61b-tued"},{"vulnerability":"VCID-pcez-y67t-8yg3"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/golang@1.25.8-1%3Farch=el10_0"},{"url":"http://public2.vulnerablecode.io/api/packages/1116154?format=json","purl":"pkg:rpm/redhat/golang1-25-main@1.25.9-1?arch=hum1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-245f-jhkn-w3ck"},{"vulnerability":"VCID-254d-pjst-c7hx"},{"vulnerability":"VCID-3nqb-6mna-jyb4"},{"vulnerability":"VCID-5q9b-a7c4-1yht"},{"vulnerability":"VCID-6rkv-zkwa-mqhf"},{"vulnerability":"VCID-6vp5-c27t-zkhh"},{"vulnerability":"VCID-73s2-6cpr-gkdu"},{"vulnerability":"VCID-7n3z-vwk2-3ydr"},{"vulnerability":"VCID-91yp-p6st-8ucd"},{"vulnerability":"VCID-9ky3-s2vk-cuge"},{"vulnerability":"VCID-asx6-ds7x-6ubz"},{"vulnerability":"VCID-br2f-7ux9-hkhg"},{"vulnerability":"VCID-bv1f-bee8-cbek"},{"vulnerability":"VCID-csmt-e61b-tued"},{"vulnerability":"VCID-czyb-wuf2-x7he"},{"vulnerability":"VCID-dp1t-v58b-43du"},{"vulnerability":"VCID-dtt9-gmqf-nbaf"},{"vulnerability":"VCID-eyev-qpgs-hfbx"},{"vulnerability":"VCID-h4tn-wydf-mydg"},{"vulnerability":"VCID-hay4-q9m3-ekdj"},{"vulnerability":"VCID-hu5a-ewvg-6ya7"},{"vulnerability":"VCID-je6z-v5qw-ufew"},{"vulnerability":"VCID-jwxs-gteb-kfg5"},{"vulnerability":"VCID-kjf2-r6zt-zqg9"},{"vulnerability":"VCID-mvsr-c2yh-mbdq"},{"vulnerability":"VCID-pcez-y67t-8yg3"},{"vulnerability":"VCID-q9yj-ze4x-qyfr"},{"vulnerability":"VCID-s176-xcrb-e3ea"},{"vulnerability":"VCID-sb3w-x3yv-ffft"},{"vulnerability":"VCID-svbs-h3y5-wfbn"},{"vulnerability":"VCID-t19m-gs1u-rbfp"},{"vulnerability":"VCID-t2dr-6dz3-7qgt"},{"vulnerability":"VCID-tmb1-tq9e-puhd"},{"vulnerability":"VCID-usyf-s559-pkgx"},{"vulnerability":"VCID-vw1r-8zev-ykf4"},{"vulnerability":"VCID-wchc-as62-1fae"},{"vulnerability":"VCID-yj5c-4wbb-gbcx"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/golang1-25-main@1.25.9-1%3Farch=hum1"},{"url":"http://public2.vulnerablecode.io/api/packages/1114085?format=json","purl":"pkg:rpm/redhat/golang1-26-main@1.26.2-1?arch=hum1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-245f-jhkn-w3ck"},{"vulnerability":"VCID-254d-pjst-c7hx"},{"vulnerability":"VCID-3nqb-6mna-jyb4"},{"vulnerability":"VCID-5q9b-a7c4-1yht"},{"vulnerability":"VCID-6a6z-bq7m-c3gf"},{"vulnerability":"VCID-6rkv-zkwa-mqhf"},{"vulnerability":"VCID-73s2-6cpr-gkdu"},{"vulnerability":"VCID-7n3z-vwk2-3ydr"},{"vulnerability":"VCID-8s5d-1byz-8fhz"},{"vulnerability":"VCID-91yp-p6st-8ucd"},{"vulnerability":"VCID-9ky3-s2vk-cuge"},{"vulnerability":"VCID-asx6-ds7x-6ubz"},{"vulnerability":"VCID-br2f-7ux9-hkhg"},{"vulnerability":"VCID-bv1f-bee8-cbek"},{"vulnerability":"VCID-csmt-e61b-tued"},{"vulnerability":"VCID-czyb-wuf2-x7he"},{"vulnerability":"VCID-dp1t-v58b-43du"},{"vulnerability":"VCID-dtt9-gmqf-nbaf"},{"vulnerability":"VCID-eyev-qpgs-hfbx"},{"vulnerability":"VCID-gtys-5r5h-p7ht"},{"vulnerability":"VCID-h4tn-wydf-mydg"},{"vulnerability":"VCID-hay4-q9m3-ekdj"},{"vulnerability":"VCID-hu5a-ewvg-6ya7"},{"vulnerability":"VCID-je6z-v5qw-ufew"},{"vulnerability":"VCID-jwxs-gteb-kfg5"},{"vulnerability":"VCID-kjf2-r6zt-zqg9"},{"vulnerability":"VCID-mvsr-c2yh-mbdq"},{"vulnerability":"VCID-pcez-y67t-8yg3"},{"vulnerability":"VCID-q9yj-ze4x-qyfr"},{"vulnerability":"VCID-s176-xcrb-e3ea"},{"vulnerability":"VCID-sb3w-x3yv-ffft"},{"vulnerability":"VCID-svbs-h3y5-wfbn"},{"vulnerability":"VCID-t19m-gs1u-rbfp"},{"vulnerability":"VCID-t2dr-6dz3-7qgt"},{"vulnerability":"VCID-tmb1-tq9e-puhd"},{"vulnerability":"VCID-usyf-s559-pkgx"},{"vulnerability":"VCID-vw1r-8zev-ykf4"},{"vulnerability":"VCID-wchc-as62-1fae"},{"vulnerability":"VCID-x5ub-bfb7-nbbr"},{"vulnerability":"VCID-yj5c-4wbb-gbcx"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/golang1-26-main@1.26.2-1%3Farch=hum1"}],"references":[{"reference_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-61731.json","reference_id":"","reference_type":"","scores":[{"value":"8.6","scoring_system":"cvssv3","scoring_elements":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H"}],"url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-61731.json"},{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2025-61731","reference_id":"","reference_type":"","scores":[{"value":"0.0001","scoring_system":"epss","scoring_elements":"0.0124","published_at":"2026-05-15T12:55:00Z"},{"value":"0.0001","scoring_system":"epss","scoring_elements":"0.01126","published_at":"2026-04-13T12:55:00Z"},{"value":"0.0001","scoring_system":"epss","scoring_elements":"0.01116","published_at":"2026-04-16T12:55:00Z"},{"value":"0.0001","scoring_system":"epss","scoring_elements":"0.01241","published_at":"2026-04-21T12:55:00Z"},{"value":"0.0001","scoring_system":"epss","scoring_elements":"0.01245","published_at":"2026-04-24T12:55:00Z"},{"value":"0.0001","scoring_system":"epss","scoring_elements":"0.01251","published_at":"2026-04-26T12:55:00Z"},{"value":"0.0001","scoring_system":"epss","scoring_elements":"0.01244","published_at":"2026-05-05T12:55:00Z"},{"value":"0.0001","scoring_system":"epss","scoring_elements":"0.01239","published_at":"2026-05-07T12:55:00Z"},{"value":"0.0001","scoring_system":"epss","scoring_elements":"0.01236","published_at":"2026-05-09T12:55:00Z"},{"value":"0.0001","scoring_system":"epss","scoring_elements":"0.01232","published_at":"2026-05-11T12:55:00Z"},{"value":"0.0001","scoring_system":"epss","scoring_elements":"0.01231","published_at":"2026-05-12T12:55:00Z"},{"value":"0.0001","scoring_system":"epss","scoring_elements":"0.01242","published_at":"2026-05-14T12:55:00Z"},{"value":"0.0001","scoring_system":"epss","scoring_elements":"0.01138","published_at":"2026-04-07T12:55:00Z"},{"value":"0.0001","scoring_system":"epss","scoring_elements":"0.01144","published_at":"2026-04-08T12:55:00Z"},{"value":"0.0001","scoring_system":"epss","scoring_elements":"0.01145","published_at":"2026-04-09T12:55:00Z"},{"value":"0.0001","scoring_system":"epss","scoring_elements":"0.01129","published_at":"2026-04-18T12:55:00Z"},{"value":"0.0001","scoring_system":"epss","scoring_elements":"0.01124","published_at":"2026-04-12T12:55:00Z"},{"value":"9e-05","scoring_system":"epss","scoring_elements":"0.00856","published_at":"2026-04-04T12:55:00Z"},{"value":"9e-05","scoring_system":"epss","scoring_elements":"0.00855","published_at":"2026-04-02T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2025-61731"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-61731","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-61731"},{"reference_url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml","reference_id":"","reference_type":"","scores":[{"value":"7","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H"}],"url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml"},{"reference_url":"https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1125916","reference_id":"1125916","reference_type":"","scores":[],"url":"https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1125916"},{"reference_url":"https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1125917","reference_id":"1125917","reference_type":"","scores":[],"url":"https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1125917"},{"reference_url":"https://bugzilla.redhat.com/show_bug.cgi?id=2434433","reference_id":"2434433","reference_type":"","scores":[],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2434433"},{"reference_url":"https://go.dev/cl/736711","reference_id":"736711","reference_type":"","scores":[{"value":"7.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-01-29T04:55:56Z/"}],"url":"https://go.dev/cl/736711"},{"reference_url":"https://go.dev/issue/77100","reference_id":"77100","reference_type":"","scores":[{"value":"7.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-01-29T04:55:56Z/"}],"url":"https://go.dev/issue/77100"},{"reference_url":"https://pkg.go.dev/vuln/GO-2026-4339","reference_id":"GO-2026-4339","reference_type":"","scores":[{"value":"7.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-01-29T04:55:56Z/"}],"url":"https://pkg.go.dev/vuln/GO-2026-4339"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:12118","reference_id":"RHSA-2026:12118","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:12118"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:12282","reference_id":"RHSA-2026:12282","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:12282"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:13736","reference_id":"RHSA-2026:13736","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:13736"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:14100","reference_id":"RHSA-2026:14100","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:14100"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:14774","reference_id":"RHSA-2026:14774","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:14774"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:15091","reference_id":"RHSA-2026:15091","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:15091"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:3556","reference_id":"RHSA-2026:3556","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:3556"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:3559","reference_id":"RHSA-2026:3559","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:3559"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:3855","reference_id":"RHSA-2026:3855","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:3855"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:4434","reference_id":"RHSA-2026:4434","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:4434"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:5133","reference_id":"RHSA-2026:5133","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:5133"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:5907","reference_id":"RHSA-2026:5907","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:5907"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:5941","reference_id":"RHSA-2026:5941","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:5941"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:5942","reference_id":"RHSA-2026:5942","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:5942"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:5943","reference_id":"RHSA-2026:5943","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:5943"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:5944","reference_id":"RHSA-2026:5944","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:5944"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:5948","reference_id":"RHSA-2026:5948","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:5948"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:5950","reference_id":"RHSA-2026:5950","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:5950"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:5952","reference_id":"RHSA-2026:5952","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:5952"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:6949","reference_id":"RHSA-2026:6949","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:6949"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:7291","reference_id":"RHSA-2026:7291","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:7291"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:7385","reference_id":"RHSA-2026:7385","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:7385"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:7833","reference_id":"RHSA-2026:7833","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:7833"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:7834","reference_id":"RHSA-2026:7834","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:7834"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:7876","reference_id":"RHSA-2026:7876","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:7876"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:7877","reference_id":"RHSA-2026:7877","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:7877"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:7878","reference_id":"RHSA-2026:7878","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:7878"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:7879","reference_id":"RHSA-2026:7879","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:7879"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:7883","reference_id":"RHSA-2026:7883","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:7883"},{"reference_url":"https://groups.google.com/g/golang-announce/c/Vd2tYVM8eUc","reference_id":"Vd2tYVM8eUc","reference_type":"","scores":[{"value":"7.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-01-29T04:55:56Z/"}],"url":"https://groups.google.com/g/golang-announce/c/Vd2tYVM8eUc"}],"weaknesses":[{"cwe_id":88,"name":"Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')","description":"The product constructs a string for a command to be executed by a separate component in another control sphere, but it does not properly delimit the intended arguments, options, or switches within that command string."},{"cwe_id":78,"name":"Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')","description":"The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component."}],"exploits":[],"severity_range_score":"7.0 - 8.6","exploitability":"0.5","weighted_severity":"7.7","risk_score":3.9,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-csmt-e61b-tued"}