Skip to content

Vulnerabilities of Go toolchain cmd/compile

Is your version affected?

CVE Summary Score Published
CVE-2026-27143 Arithmetic over induction variables in loops were not correctly checked for underflow or overflow 9.8 Critical Apr 8, 2026
CVE-2026-27144 The compiler is meant to unwrap pointers which are the operands of a memory move; a no-op interface conversion prevented… 7.1 High Apr 8, 2026

Other Go toolchain products