https://seclists.org/oss-sec/2026/q2/181: Go 1.26.2 and Go 1.25.9 aleased with 10 security fixes
Published Apr 20, 2026
·Updated
Affected Software
1 affected component
Google Go=1.26.2, =1.25.9
Frequently Asked Questions
1
What are the 10 security fixes in Go 1.26.2 and Go 1.25.9?
The 10 security fixes address vulnerabilities related to memory safety, denial of service, and information disclosure.
2
What is the severity of the vulnerabilities in Go 1.26.2 and Go 1.25.9?
The vulnerabilities have varying severities, with some categorized as critical due to their potential to cause significant harm.
3
How do I fix the vulnerabilities in Go 1.26.2 and Go 1.25.9?
To fix the vulnerabilities, upgrade to the latest version of Go, which includes the security patches.
4
Are all versions before Go 1.26.2 and Go 1.25.9 affected by the security issues?
Yes, all versions prior to Go 1.26.2 and Go 1.25.9 are affected and should be updated to mitigate the vulnerabilities.
5
What should I do if I cannot update to Go 1.26.2 or Go 1.25.9 immediately?
If an immediate update is not possible, implement additional security measures to mitigate potential risks until the upgrade can be performed.