golang.org/x/playground vulnerabilities

CVEs whose affected-version data names the golang.org/x/playground package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-94445High· 8.8

2d ago

A malicious txtar could escape the intended execution context and force arbitrary writes to the playground host's trusted filesystem. Disjointly, one of the three possible paths to invoke go vet on the playground host did not correctl…

A malicious txtar could escape the intended execution context and force arbitrary writes to the playground host's trusted filesystem. Disjointly, one of the three possible paths to invoke go vet on the playground host did not correctl…

▾ Twilightgolang.org/x/playground · golang.org/x/playgroundvia NVD