—
GO-2026-4433
Potential code smuggling via doc comments in cmd/cgo
Quick fix
GO-2026-4433 — toolchain: upgrade to the fixed version with the command below.
go get toolchain@v1.24.13Details
A discrepancy between how Go and C/C++ comments were parsed allowed for code smuggling into the resulting cgo binary.
Are you affected?
Enter the version of the package you're using.