Vulnerabilities of Go toolchain cmd/compile
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2026-27143 | Arithmetic over induction variables in loops were not correctly checked for underflow or overflow | 9.8 Critical | Apr 8, 2026 |
| CVE-2026-27144 | The compiler is meant to unwrap pointers which are the operands of a memory move; a no-op interface conversion prevented… | 7.1 High | Apr 8, 2026 |