← Back to Resources
Open Source NewsOctober 7, 20252 min read

Go Security Release: Ten Fixes

By BIOS Founding Team

Go Security Release: Ten Fixes

This release bundled ten security fixes across archive/tar, crypto/tls, crypto/x509, encoding/pem, net/http, net/mail, and other packages.

Notable fixes addressed quadratic-complexity denial-of-service vectors in x509 certificate chain validation and PEM parsing of untrusted input.

Full details: https://groups.google.com/g/golang-announce/c/4Emdl2iQ_bI