gopls vulnerabilities

CVEs whose affected-version data names the gopls package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-42503High· 8.8

4mo ago

gopls by default communicates via pipe

gopls by default communicates via pipe. However, -port and -listen flags are supported as means of debugging. If -listen is given a value without an explicit host (e.g. :8080), or -port is used, gopls will listen on 0.0.0.0. As a result…

▾ Twilightgolang · goplsEPSS 0.21%via NVD