Go 1.18.4 and Go 1.17.12 are released(groups.google.com) |
Go 1.18.4 and Go 1.17.12 are released(groups.google.com) |
Most of these are pretty easy to hit, too: App taking in XML files larger than a couple of megabytes? Probably affected. Decompressing untrusted gzip files? Yeah pretty likely also affected. Doing static analysis or linting on Go source code? Definitely affected.