golang.org/x/tools/gopls vulnerabilities
1 known vulnerability in golang.org/x/tools/gopls from Golang.org/x/tools. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
1vulnerabilities
0critical
1high
0exploited
8.8average CVSS score
Latest first
- 8.8 High severity
golang.org/x/tools/gopls: Binding to an Unrestricted IP Address
gopls by default communicates via pipe. However, -port and -listen flags are supported as means of debugging. If -listen is given a value without an explicit host (e.g. :8080), or -port is used, gopls will listen on 0.0.0.0. As a result, users might inadverten