https://groups.google.com/g/golang-announce/c/smSYdsWaO4o?pli=1
Hello gophers,
We plan to issue Go 1.22.1 and Go 1.21.8 during US business hours on Tuesday, March 5.
These minor releases include PRIVATE security fixes to the standard library, covering the following CVEs:
CVE-2024-24783
CVE-2023-45290
CVE-2023-45289
Following our security policy, this is the pre-announcement of those releases.
Thanks, Michael and Carlos for the Go team