[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-CVE-2025-22867":6},{"stargazers_count":4,"fetched_at":5},7,"2026-06-05T20:55:33.689Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":11,"aliases":12,"duplicate_of":9,"upstream":15,"downstream":16,"duplicates":25,"related":26,"reserved_at":9,"published_at":31,"modified_at":32,"state":33,"summary":34,"references_raw":43,"kevs":65,"epss":66,"epss_history":69,"metrics":334,"affected":342},"CVE-2025-22867","On Darwin, building a Go module which contains CGO can trigger arbitrary code execution when using the Apple version of ld, due to usage of the @executable_path, @loader_path, or @rpath special values in a \"#cgo LDFLAGS\" directive. This issue only affected go1.24rc2.",null,[],[],[13,14],"GO-2025-3428","BIT-golang-2025-22867",[],[17,19,21,23],{"_key":18},"SUSE-SU-2025:0429-1",{"_key":20},"SUSE-SU-2025:0431-1",{"_key":22},"OPENSUSE-SU-2025:14735-1",{"_key":24},"OPENSUSE-SU-2025:14754-1",[],[27,28,29,30],{"_key":18},{"_key":20},{"_key":22},{"_key":24},"2025-02-06T17:09:56.893Z","2025-02-06T21:23:25.105Z","Deferred",{"cisa_kev":35,"cisa_ransomware":35,"cisa_vendor":9,"epss_severity":36,"epss_score":37,"severity":38,"severity_score":39,"severity_version":40,"severity_source":41,"severity_vector":42,"severity_status":33},false,"low",0.00411,"high",7.5,"v3.1","cve.org","CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",[44,51,56,61],{"url":45,"sources":46,"tags":49},"https://go.dev/cl/646996",[41,47,48],"nvd","osv_go",[50],"FIX",{"url":52,"sources":53,"tags":54},"https://go.dev/issue/71476",[41,47,48],[55],"REPORT",{"url":57,"sources":58,"tags":59},"https://groups.google.com/g/golang-dev/c/TYzikTgHK6Y",[41,47,48],[60],"WEB",{"url":62,"sources":63,"tags":64},"https://pkg.go.dev/vuln/GO-2025-3428",[41,47],[],[],{"date":67,"score":37,"percentile":68},"2026-06-04",0.61711,[70,74,77,80,83,86,89,92,95,98,101,104,107,110,112,116,119,121,124,127,131,134,137,140,143,146,149,152,155,158,162,165,168,171,174,177,180,183,186,189,192,194,196,199,202,205,208,211,214,217,220,223,226,228,231,234,236,239,242,245,248,251,254,257,259,262,265,268,270,273,276,279,282,285,288,291,294,297,300,303,306,309,312,314,316,319,322,325,328,331],{"date":71,"score":72,"percentile":73},"2025-11-04",0.00381,0.58831,{"date":75,"score":72,"percentile":76},"2025-11-05",0.58816,{"date":78,"score":72,"percentile":79},"2025-11-06",0.58823,{"date":81,"score":72,"percentile":82},"2025-11-07",0.58845,{"date":84,"score":72,"percentile":85},"2025-11-08",0.58841,{"date":87,"score":72,"percentile":88},"2025-11-09",0.5883,{"date":90,"score":72,"percentile":91},"2025-11-10",0.58805,{"date":93,"score":72,"percentile":94},"2025-11-11",0.58818,{"date":96,"score":72,"percentile":97},"2025-11-12",0.58842,{"date":99,"score":72,"percentile":100},"2025-11-13",0.58849,{"date":102,"score":72,"percentile":103},"2025-11-14",0.58856,{"date":105,"score":72,"percentile":106},"2025-11-15",0.58846,{"date":108,"score":72,"percentile":109},"2025-11-16",0.58829,{"date":111,"score":72,"percentile":79},"2025-11-17",{"date":113,"score":114,"percentile":115},"2025-11-18",0.00647,0.68384,{"date":117,"score":114,"percentile":118},"2025-11-19",0.68391,{"date":120,"score":114,"percentile":115},"2025-11-20",{"date":122,"score":72,"percentile":123},"2025-11-21",0.58839,{"date":125,"score":72,"percentile":126},"2025-11-22",0.58834,{"date":128,"score":129,"percentile":130},"2025-11-23",0.00413,0.60818,{"date":132,"score":129,"percentile":133},"2025-11-24",0.60817,{"date":135,"score":129,"percentile":136},"2025-11-25",0.60821,{"date":138,"score":129,"percentile":139},"2025-11-26",0.60824,{"date":141,"score":129,"percentile":142},"2025-11-27",0.60829,{"date":144,"score":129,"percentile":145},"2025-11-28",0.60807,{"date":147,"score":129,"percentile":148},"2025-11-29",0.60777,{"date":150,"score":129,"percentile":151},"2025-11-30",0.60769,{"date":153,"score":129,"percentile":154},"2025-12-01",0.60915,{"date":156,"score":129,"percentile":157},"2025-12-02",0.60928,{"date":159,"score":160,"percentile":161},"2025-12-03",0.00485,0.64641,{"date":163,"score":160,"percentile":164},"2025-12-04",0.64462,{"date":166,"score":160,"percentile":167},"2025-12-05",0.64477,{"date":169,"score":160,"percentile":170},"2025-12-06",0.6448,{"date":172,"score":160,"percentile":173},"2025-12-07",0.64475,{"date":175,"score":160,"percentile":176},"2025-12-08",0.64482,{"date":178,"score":160,"percentile":179},"2025-12-09",0.64517,{"date":181,"score":160,"percentile":182},"2025-12-10",0.64564,{"date":184,"score":160,"percentile":185},"2025-12-11",0.64582,{"date":187,"score":160,"percentile":188},"2025-12-12",0.64601,{"date":190,"score":160,"percentile":191},"2025-12-13",0.64606,{"date":193,"score":160,"percentile":191},"2025-12-14",{"date":195,"score":160,"percentile":188},"2025-12-15",{"date":197,"score":160,"percentile":198},"2025-12-16",0.64616,{"date":200,"score":160,"percentile":201},"2025-12-17",0.6463,{"date":203,"score":160,"percentile":204},"2025-12-18",0.64665,{"date":206,"score":160,"percentile":207},"2025-12-19",0.6468,{"date":209,"score":160,"percentile":210},"2025-12-20",0.64677,{"date":212,"score":160,"percentile":213},"2025-12-21",0.64666,{"date":215,"score":160,"percentile":216},"2025-12-22",0.64658,{"date":218,"score":160,"percentile":219},"2025-12-23",0.64664,{"date":221,"score":160,"percentile":222},"2025-12-24",0.64667,{"date":224,"score":160,"percentile":225},"2025-12-25",0.64693,{"date":227,"score":160,"percentile":225},"2025-12-26",{"date":229,"score":160,"percentile":230},"2025-12-27",0.6475,{"date":232,"score":160,"percentile":233},"2025-12-28",0.64669,{"date":235,"score":160,"percentile":216},"2025-12-29",{"date":237,"score":160,"percentile":238},"2025-12-30",0.64676,{"date":240,"score":160,"percentile":241},"2025-12-31",0.647,{"date":243,"score":160,"percentile":244},"2026-01-01",0.64892,{"date":246,"score":160,"percentile":247},"2026-01-02",0.64878,{"date":249,"score":160,"percentile":250},"2026-01-03",0.64879,{"date":252,"score":160,"percentile":253},"2026-01-04",0.64701,{"date":255,"score":160,"percentile":256},"2026-01-05",0.64696,{"date":258,"score":160,"percentile":225},"2026-01-06",{"date":260,"score":160,"percentile":261},"2026-01-07",0.64714,{"date":263,"score":160,"percentile":264},"2026-01-08",0.64735,{"date":266,"score":160,"percentile":267},"2026-01-09",0.64738,{"date":269,"score":160,"percentile":264},"2026-01-10",{"date":271,"score":160,"percentile":272},"2026-01-11",0.64725,{"date":274,"score":160,"percentile":275},"2026-01-12",0.64711,{"date":277,"score":160,"percentile":278},"2026-01-13",0.64707,{"date":280,"score":160,"percentile":281},"2026-01-14",0.64741,{"date":283,"score":160,"percentile":284},"2026-01-15",0.64758,{"date":286,"score":160,"percentile":287},"2026-01-16",0.64777,{"date":289,"score":160,"percentile":290},"2026-01-17",0.64765,{"date":292,"score":160,"percentile":293},"2026-01-18",0.64752,{"date":295,"score":160,"percentile":296},"2026-01-19",0.6474,{"date":298,"score":160,"percentile":299},"2026-01-20",0.64753,{"date":301,"score":160,"percentile":302},"2026-01-21",0.64763,{"date":304,"score":160,"percentile":305},"2026-01-22",0.64772,{"date":307,"score":160,"percentile":308},"2026-01-23",0.64803,{"date":310,"score":160,"percentile":311},"2026-01-24",0.6481,{"date":313,"score":160,"percentile":287},"2026-01-25",{"date":315,"score":160,"percentile":302},"2026-01-26",{"date":317,"score":160,"percentile":318},"2026-01-27",0.64773,{"date":320,"score":160,"percentile":321},"2026-01-28",0.64787,{"date":323,"score":160,"percentile":324},"2026-01-29",0.64786,{"date":326,"score":160,"percentile":327},"2026-01-30",0.64794,{"date":329,"score":160,"percentile":330},"2026-01-31",0.64797,{"date":332,"score":160,"percentile":333},"2026-02-01",0.64949,[335,340],{"source":41,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":336,"cvss_v4_0":9},{"baseScore":39,"baseSeverity":337,"vectorString":42,"impactScore":338,"exploitabilityScore":339},"HIGH",6,10,{"source":47,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":341,"cvss_v4_0":9},{"baseScore":39,"baseSeverity":337,"vectorString":42,"impactScore":338,"exploitabilityScore":339},[343,355],{"ecosystem":9,"name":344,"vendor":345,"product":344,"cpe_part":346,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":347},"cmd/go","go toolchain","a",[348],{"version":349,"is_range":350,"range_type":41,"version_start":351,"version_start_type":352,"version_end":353,"version_end_type":354,"fixed_in":9},">= 1.24.0-rc.2, \u003C 1.24.0-rc.3",true,"1.24.0-rc.2","including","1.24.0-rc.3","excluding",{"ecosystem":356,"name":357,"vendor":356,"product":357,"cpe_part":9,"purl_type":358,"purl_namespace":9,"purl_name":357,"source":9,"versions":359},"Go","toolchain","golang",[360],{"version":361,"is_range":350,"range_type":362,"version_start":351,"version_start_type":352,"version_end":353,"version_end_type":354,"fixed_in":9},"gte1_24_0_rc_2_lt1_24_0_rc_3","semver"]