golang.org/x/sys (Go)
Advisories
3
Latest version
v0.49.0
Released Oct 6, 2026
License
BSD-3-Clause
OpenSSF Scorecard
—
How to fix
Upgrading to 0.44.0 or later clears every advisory below that has a fix.
Upgrade commands
go
go get golang.org/x/sys@v0.49.0 && go mod tidyKnown vulnerabilities
| Advisory | Severity | Affected | Fixed in |
|---|---|---|---|
| GO-2026-5024 Invoking integer overflow in NewNTUnicodeString in golang.org/x/sys/windows |
Low EPSS 0.11% |
< 0.44.0 | 0.44.0 |
| GHSA-p782-xgp4-8hr8 golang.org/x/sys/unix has Incorrect privilege reporting in syscall |
Medium EPSS 2.95% |
< 0.0.0-20220412211240-33da011f77ad | 0.0.0-20220412211240-33da011f77ad |
| GHSA-p782-xgp4-8hr8 golang.org/x/sys/unix has Incorrect privilege reporting in syscall |
Medium EPSS 2.95% |
< 0.0.0-20220412211240-33da011f77ad | 0.0.0-20220412211240-33da011f77ad |
Source: https://go.googlesource.com/sys
MergeHarbor checks every repository's dependencies against this database, ranks what matters by exploitability and reachability, routes it to the owning team and opens the fix pull request.
Check your repos with MergeHarbor