- Update to Go 1.25.7 - CVE-2025-61726: fixed DoS due to memory exhaustion flaw in net/url parameter parsing - CVE-2025-61732: fixed RCE via code smuggling flaw in cgo comment parsing - CVE-2025-68121: fixed security bypass in TLS where session resumption could ignore revoked or expired client certificates. - CVE-2025-61731: fixed arbitrary code execution vulnerability in the go command toolchain involving unsafe cgo configuration flags. - CVE-2025-68119: fixed arbitrary code execution risk when the go tool processes malicious version strings from external source control. - CVE-2025-61730: fixed minor information disclosure in TLS 1.3 during specific encrypted handshake message transitions. - CVE-2025-61727: fixed certificate validation bypass where specific wildcard domain constraints were not properly enforced by the security library.