Curated security research, vulnerabilities, advisories and tools for practitioners.

#go

Security coverage tagged go.

1.

DavidCarliez/trustmebro: Bypass llm guardrails by confusing it with fabricated tool output

tool | 2026-09-02 23:54 | github.com | original ↗ | #ai-security | #open-source | #red-team

2.

gosentry brings LibAFL-grade fuzzing to Go's native interface

blog | 2026-05-12 11:00 | blog.trailofbits.com | original ↗ | #appsec | #fuzzing | #go

3.

Detect Go’s silent arithmetic bugs with go-panikint

blog | 2025-12-31 12:00 | blog.trailofbits.com | original ↗ | #vulnerability-research | #developer-security | #fuzzing

4.

How we avoided side-channels in our new post-quantum Go cryptography libraries

blog | 2025-11-14 12:00 | blog.trailofbits.com | original ↗ | #open-source | #cryptography | #post-quantum

5.

Unexpected security footguns in Go's parsers

blog | 2025-06-18 11:00 | CVE-2020-16250 | blog.trailofbits.com | original ↗ | #authentication-bypass | #deserialization | #go

6.

“Unstripping” binaries: Restoring debugging information in GDB with Pwndbg

blog | 2024-09-06 13:00 | blog.trailofbits.com | original ↗ | #reverse-engineering | #go | #debugging

7.

Announcing two new LMS libraries

blog | 2024-04-26 13:00 | blog.trailofbits.com | original ↗ | #open-source | #rust | #post-quantum-cryptography

8.

Improving the state of Cosmos fuzzing

blog | 2024-02-05 14:00 | blog.trailofbits.com | original ↗ | #web3 | #fuzzing | #go

9.

Publishing Trail of Bits’ CodeQL queries

blog | 2023-12-06 13:30 | blog.trailofbits.com | original ↗ | #cryptography | #c | #go

10.

Discovering goroutine leaks with Semgrep

blog | 2021-11-09 04:28 | blog.trailofbits.com | original ↗ | #go | #static-analysis | #concurrency

11.

Smart (and simple) ways to prevent symlink attacks in Go

blog | 2020-11-24 13:00 | blog.trailofbits.com | original ↗ | #secure-coding | #go | #vulnerabilities

12.

How to check if a mutex is locked in Go

blog | 2020-06-09 11:50 | blog.trailofbits.com | original ↗ | #go | #debugging | #concurrency

13.

Security assessment techniques for Go projects

blog | 2019-11-07 12:00 | blog.trailofbits.com | original ↗ | #kubernetes | #fuzzing | #go

14.

Panicking the right way in Go

blog | 2019-06-26 10:50 | blog.trailofbits.com | original ↗ | #web3 | #go | #tools