{"id":"CVE-2024-8244","details":"The filepath.Walk and filepath.WalkDir functions are documented as not following symbolic links, but both functions are susceptible to a TOCTOU (time of check/time of use) race condition where a portion of the path being walked is replaced with a symbolic link while the walk is in progress.","modified":"2026-04-10T05:19:48.723339Z","published":"2025-08-06T16:15:28Z","references":[{"type":"WEB","url":"https://go.dev/issue/70007"},{"type":"WEB","url":"https://pkg.go.dev/vuln/GO-2025-9999"}],"schema_version":"1.7.5"}