Everything Threat Times has reported about Go: 3 stories, newest first. Part of our Vulnerabilities coverage.
Google suspended its open-source bug bounty program on October 1 to stop processing a surge of invalid automated submissions, though supply chain reports remain accepted.
A critical flaw in Privasys Go allowed attackers to relay enclave certificates across sessions. The vendor has released a fix in version 0.5.1.
A critical-severity advisory for the go package github.com/siyuan-note/siyuan/kernel is fixed in version 0.0.0-20260721043339-eef10568384e.