Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

x/website: list CVEs in doc/devel/release #66747

Open
FiloSottile opened this issue Apr 9, 2024 · 3 comments
Open

x/website: list CVEs in doc/devel/release #66747

FiloSottile opened this issue Apr 9, 2024 · 3 comments
Labels
NeedsInvestigation Someone must examine and confirm this is a valid issue and not a duplicate of an existing one. website
Milestone
website/backlog

Comments

@FiloSottile
Copy link
Contributor

There is no page that lists all the CVEs that were fixed in Go, as far as I know, and the CVE database is kinda hard to map to packages and Go releases. It feels like it would be an easy addition to doc/devel/release, at least going forward.
@seankhliao seankhliao changed the title website: list CVEs in doc/devel/release x/website: list CVEs in doc/devel/release Apr 9, 2024
@gopherbot gopherbot added this to the Unreleased milestone Apr 9, 2024
@seankhliao
Copy link
Member

cc @golang/security

@rolandshoemaker
Copy link
Member

Seems like a reasonable addition.

@cagedmantis cagedmantis added the NeedsInvestigation Someone must examine and confirm this is a valid issue and not a duplicate of an existing one. label Apr 10, 2024
@adonovan adonovan modified the milestones: Unreleased, website/backlog Apr 11, 2024
@tatianab
Copy link

Agree that this would be nice!

As a workaround, you can use the following searches to get something close:

https://pkg.go.dev/search?q=stdlib&m=vuln
https://pkg.go.dev/search?q=toolchain&m=vuln
https://pkg.go.dev/search?q=golang.org&m=vuln

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
NeedsInvestigation Someone must examine and confirm this is a valid issue and not a duplicate of an existing one. website
Projects
None yet
Milestone
website/backlog
Development

No branches or pull requests
7 participants
@cagedmantis @FiloSottile @rolandshoemaker @adonovan @tatianab @gopherbot @seankhliao