Go 1.26.6 and 1.25.13 security releases due August 11

The Go project plans to release Go 1.26.6 and Go 1.25.13 during US business hours on Tuesday, August 11, with private security fixes in the standard library and toolchain.

The updates address CVE-2026-56865, CVE-2026-56864, and CVE-2026-33818. Details of the flaws remain private ahead of the releases, in line with the project's security policy.

Mark and Cherry announced the schedule on behalf of the Go team. Users who track supported minor versions should prepare to upgrade once the builds are published.