TLDR InfoSec · QUICK LINKS
GO 1.25.6 AND 1.24.12 PATCH CRITICAL VULNERABILITIES LEAD TO DOS AND MEMORY EXHAUSTION RISKS
Summary from the TLDR InfoSec newsletter
Go has released emergency patches addressing six security flaws, including DoS vectors in archive/zip and net/http, arbitrary code execution via cmd/go's CgoPkgConfig and VCS toolchain handling, and TLS session key leakage issues.