CVE-2026-97043

The Go toolchain is vulnerable to unexpected code execution at build time or a command panic due to a mismatch in how //go:cgo_ldflag directives are parsed. Specifically, while cmd/cgo uses strconv.Quote to quote #cgo LDFLAGS arguments, cmd/compile and cmd/go split these directives on raw quote c...