GHSA-gwrf-jf3h-w649Published
Unexpected paths returned from LookPath in os/exec
Explicit identifiers and source references
These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.
CVE-2025-47906 · Microsoft / collected KEV context
cve-program · CVE-2025-47906
- https://go.dev/cl/691775
- https://go.dev/issue/74466
- https://groups.google.com/g/golang-announce/c/x5MKroML2yM
- https://pkg.go.dev/vuln/GO-2025-3956
euvd · EUVD-2025-30195
- https://go.dev/cl/691775
- https://go.dev/issue/74466
- https://groups.google.com/g/golang-announce/c/x5MKroML2yM
- https://pkg.go.dev/vuln/GO-2025-3956
nvd · CVE-2025-47906
- https://go.dev/cl/691775
- https://go.dev/issue/74466
- https://groups.google.com/g/golang-announce/c/x5MKroML2yM
- https://pkg.go.dev/vuln/GO-2025-3956
- http://www.openwall.com/lists/oss-security/2025/08/06/1
osv · GO-2025-3956
Related operational evidence
Explicit CVE identifiers- Release 2025-10-12 · Tool release · 17 Oct 2025
- Release 2025-09-21 · Tool release · 26 Sep 2025