https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-09-30T03:44:03.737981+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2026-39822 CVE-2026-39822 — Root escape via symlink plus trailing slash in os 2026-09-30T03:44:03.739047+00:00

Affected: Go standard library os

On Unix systems, opening a file in an os.Root improperly follows symlinks to locations outside of the Root when the final path component of the a path is a symbolic link and the path ends in /. For example, 'root.Open("symlink/")' will open "symlink" even when "symlink" is a symbolic link pointing outside of the root.