Go ships 12 security fixes, including a server crash and build-time code execution
Go 1.27.4 and 1.26.11 close an HTTP/1 panic in MaxBytesReader and stop malicious cgo packages from running code during the build.
By segfault#nethttp
Go patches build-time code execution and HTTP crash
Releases 1.27.4 and 1.26.11 include 12 security fixes, among them cgo flags that could run attacker code during a build.
By segfault