Skip to content

Instantly share code, notes, and snippets.

# GOTOOLCHAIN=go1.24.1 govulncheck ./...
=== Symbol Results ===
Vulnerability #1: GO-2025-4175
Improper application of excluded DNS name constraints when verifying
wildcard names in crypto/x509
More info: https://pkg.go.dev/vuln/GO-2025-4175
Standard library
Found in: crypto/[email protected]
Fixed in: crypto/[email protected]
{
"results": [
{
"name": "datadog/agent",
"labels": {
"org.opencontainers.image.authors": "Datadog \[email protected]\u003e",
"org.opencontainers.image.base.name": "ubuntu:24.04",
"org.opencontainers.image.created": "2025-11-11 18:34:46+00:00",
"org.opencontainers.image.ref.name": "ubuntu",
"org.opencontainers.image.revision": "b202f1ec01f99a317628280a586ae208417ea3bd",
{
"results": [
{
"name": "adminer"
},
{
"name": "adoptopenjdk"
},
{
"name": "aerospike",
# on Ubuntu 22.04 aws instance:
wget https://go.dev/dl/go1.23.5.linux-arm64.tar.gz
sudo rm -rf /usr/local/go && sudo tar -C /usr/local -xzf go1.23.5.linux-arm64.tar.gz
git clone https://github.com/go-json-experiment/jsonbench
go test -timeout 0 -count=15 -bench='Benchmark/.*/.*/JSONv[12]/.*' -run=^$ > "$(curl -s http://169.254.169.254/latest/meta-data/instance-type).txt"
#Then copy both .txt files with benchmark result to the same location, and run (https://pkg.go.dev/golang.org/x/perf/cmd/benchstat)
go install golang.org/x/perf/cmd/benchstat@latest
# benchstat m6g.16xlarge.txt m8g.16xlarge.txt