Summary
This release includes security fixes for multiple CVE vulnerabilities.
Highlights
- Security: Remediated 14 CVE vulnerabilities (1 Critical, 3 High, 6 Medium, 1 Low, 2 Unknown)
- Go Runtime: Updated from 1.25.10 to 1.25.11 (fixes 6 stdlib CVEs including CVE-2026-42504, CVE-2026-42507, CVE-2026-27145)
- Dependencies: Updated golang.org/x/net to v0.55.0 (fixes 7 CVEs including critical GO-2026-5026)
- Dependencies: Updated golang.org/x/sys to v0.45.0 (fixes GO-2026-5024)
Fixed CVEs
Critical
- GO-2026-5026 (golang.org/x/net)
High
- CVE-2026-42504 (stdlib)
- GO-2026-5038 (stdlib)
- GO-2026-4918 (golang.org/x/net)
Medium
- CVE-2026-42507 (stdlib)
- GO-2026-5039 (stdlib)
- GO-2026-5028, GO-2026-5025, GO-2026-5027, GO-2026-5029, GO-2026-5030 (golang.org/x/net)
Low
- GO-2026-5024 (golang.org/x/sys)