EUVD-2026-123108

Building a malicious package that uses cgo could cause arbitrary code execution at link time by passing linker script files to the host linker via "cgo LDFLAGS". Split "-Wl," flags that consume a following argument such as "-Wl,-rpath", "-Wl,--just-symbols", and "-Wl,-undefined" previously accept...

PT-2026-144960

Building a malicious package that uses cgo could cause arbitrary code execution at link time by passing linker script files to the host linker via "cgo LDFLAGS". Split "-Wl," flags that consume a following argument such as "-Wl,-rpath", "-Wl,--just-symbols", and "-Wl,-undefined" previously accept...