CVE-2026-97035 Unexpected code execution and arbitrary file write via Clang -gen-* and GCC -gnat* flags in cgo in cmd/go

When using Clang or GCC, building a malicious package that uses cgo could cause unexpected code execution at build time or write files to arbitrary directories via "-gen-" or "-gnat" flags in "cgo" directives. The "-g" wildcard in the compiler and linker flag allowlists previously matched Clang's...