- Latest release
- Not known: cve.now hasn't read this package's releases
- Newest unaffected release
- Not known without release data
- Advisories
- 2 · 1 critical, 1 high
- Registry
- pkg.go.dev
Advisories 2
- CVE-2026-27143Critical 9.8
Missing bound checks can lead to memory corruption in safe Go in cmd/compile
Affected: fixed in 1.25.9; from 1.26.0-0, fixed in 1.26.2.
- CVE-2026-27144High 7.1
Miscompilation allows memory corruption via CONVNOP-wrapped array copy in cmd/compile
Affected: fixed in 1.25.9; from 1.26.0-0, fixed in 1.26.2.