go -- syscall, os/exec: unsanitized NUL in environment variables

The Go project reports:

syscall, os/exec: unsanitized NUL in environment
variables
On Windows, syscall.StartProcess and os/exec.Cmd did not
properly check for invalid environment variable values. A
malicious environment variable value could exploit this
behavior to set a value for a different environment
variable. For example, the environment variable string
“A=B\x00C=D” set the variables “A=B” and “C=D”.