Tag

go-get

Safeguard articles tagged "go-get" — guides, analysis, and best practices for software supply chain and application security.

1 article

Go's 'go get' Directory Traversal via GOPATH Package Path...

CVE-2018-16874: a directory traversal flaw in Go's go get let malicious GOPATH import paths with curly braces write files outside the workspace.