{"id":"CVE-2024-8244","details":"The filepath.Walk and filepath.WalkDir functions are documented as not following symbolic links, but both functions are susceptible to a TOCTOU (time of check/time of use) race condition where a portion of the path being walked is replaced with a symbolic link while the walk is in progress.","modified":"2026-05-10T18:42:09.905233782Z","published":"2025-08-06T16:15:28Z","withdrawn":"2026-01-27T04:19:50.861164Z","references":[{"type":"WEB","url":"https://go.dev/issue/70007"},{"type":"WEB","url":"https://pkg.go.dev/vuln/GO-2025-9999"}],"schema_version":"1.7.3"}