https://groups.google.com/g/golang-announce/c/smSYdsWaO4o?pli=1

Hello gophers,

We plan to issue Go 1.22.1 and Go 1.21.8 during US business hours on Tuesday, March 5.

These minor releases include PRIVATE security fixes to the standard library, covering the following CVEs:

CVE-2024-24783

CVE-2023-45290

CVE-2023-45289

Following our security policy, this is the pre-announcement of those releases.

Thanks, Michael and Carlos for the Go team