https://seclists.org/oss-sec/2026/q2/187: Go 1.26.2 and Go 1.25.9 aleased with 10 security fixes
Published Apr 20, 2026
·Updated
Affected Software
1 affected component
Google Go=1.26.2, =1.25.9
Frequently Asked Questions
1
What is the severity of Go 1.26.2 and Go 1.25.9 vulnerabilities?
The vulnerabilities in Go 1.26.2 and Go 1.25.9 are classified as critical, as they address multiple security fixes that could lead to severe exploitation risks.
2
How do I fix Go 1.26.2 and Go 1.25.9 vulnerabilities?
To fix the vulnerabilities in Go 1.26.2 and Go 1.25.9, update to the latest patched version of Go as soon as possible.
3
What types of vulnerabilities are addressed in Go 1.26.2 and Go 1.25.9?
Go 1.26.2 and Go 1.25.9 address various security weaknesses including memory corruption and denial of service vulnerabilities.
4
Are all Go applications affected by the vulnerabilities in Go 1.26.2 and Go 1.25.9?
Not all Go applications are affected; the impact depends on whether they were compiled with the vulnerable versions of the Go programming language.
5
When were the vulnerabilities in Go 1.26.2 and Go 1.25.9 published?
The vulnerabilities in Go 1.26.2 and Go 1.25.9 were published on April 20, 2026.