Security patches in upcoming Go 1.25.2 and golang.org/x/net #7590
Description
Go 1.25.2 will be released October 7th during US business hours. Fixes the following currently undisclosed CVEs:
- CVE-2025-61724
- CVE-2025-61725
- CVE-2025-58187
- CVE-2025-61723
- CVE-2025-47912
- CVE-2025-58185
- CVE-2025-58186
- CVE-2025-58188
- CVE-2025-58183
Additionally two CVEs for golang.org/x/net:
- CVE-2025-58190
- CVE-2025-47911
Since the announcement specifically mentions golang.org/x/net is affected, I think we should be ready to make a new patch release - depending on the impact of course. Just making an issue here for awareness.
Links: