Everything our pipeline collected. Use the section tabs and filters to narrow — look for the In digest badge to see which stories actually made it into the newsletter.
Remote - Market-leading travel agency (part of an international holding) working with numerous tour operator partners is looking for a Golang Developers to join our core backend engineering team. Our
Lots of background and a implementation, albeit from 3+ years ago: https://blog.filippo.io/playing-with-kernel-tls-in-linux-4-13-and-go/ Basically, Li
Proposal Details https://datatracker.ietf.org/doc/draft-aaron-acme-profiles/ https://datatracker.ietf.org/doc/draft-ietf-acme-profiles/ is a relativ
fmt.Sprintf("%d", new(int)) prints a string of decimal digits, which appears in practice to be almost always a mistake caused by forgetting to derefer
An open-source and free self-hosted SSL certificates ACME tool, automates the full-cycle of issuance, deployment, renewal, and monitoring visually. 完全开源免费的自托管 SSL 证书 ACME 工��
If you’re reading this, you probably already know that pgx is the de facto
Proposal Details TL;DR: Please reconsider adding the Tau circle constant. Circle geometry and trigonometry is fundamentally built on the radius, whi
Pure freshie of Go here, I'm from C background, and feel like wanna pivot to fully Golang in future I saw only companies with Java are switching to Go but haven't seen any C company switch to Go yet.
Proposal Details Go currently targets the z13 instruction set as the minimum when building for GOARCH=s390x . This has been the case since Go 1.19, as
g.o.m.l i didnt want to share this before, i have had it for a while, but i just didnt have the time to show it to anyone also i'm on some crappy laptop now and oh god is this thing sluggish and falli
Fuzz tests are great for parsers, encoder decoders and validators. What else are you using it for? Curious to know if anyone is extensively using the fuzztest stdlib. What kinds of bugs have you caugh
Can anyone recommend open-source Go projects implementing a real-time voice chat server (Discord/TeamSpeak-like)? I'm looking to study the architecture and networking design rather than WebRTC tutoria
Targeting Go 1.28 — Background: The Go Collections working group was formed in late 2025 with the purpose of bringing common collection data structures to the standard li
If your team only posts the RAM chart, this benchmark will trick you. Github Repo: ...
Fast, scriptable CLI for the App Store Connect API. Automate TestFlight, builds, submissions, signing, analytics, screenshots, subscriptions, and more. JSON-first, no interactive prompts
Improper parsing of W3C baggage headers may lead to DoS in github.com/DataDog/dd-trace-go
Ollama is Vulnerable to Path Traversal in github.com/ollama/ollama
Providing a specially crafted dictionary to s2.NewDict and using it to encode data can make the encoder read out of bounds.
ReadDir and ReadDirPlus parse the QUERY DIRECTORY SMB response by advancing through entries using the server-supplied NextEntryOffset field. The pre-fix code does not bound next against the remaining
The Avro map decoder accepts attacker-controlled block-element counts from the wire format and grows the destination map without enforcing an upper bound. A producer can declare an arbitrarily large m
Several Avro decoder paths read attacker-controlled 64-bit values from the wire format and either narrowed them to platform-sized int before bounds-checking, or summed them with overflow-prone signed-
The Avro array and map decoders loop over an attacker-controlled block-count value without checking the underlying reader's error state inside the loop body. Reader.ReadBlockHeader returns the count a
pdf.Open and PDF object resolution in rsc.io/pdf recurse without bound on nested arrays and dictionaries. A sufficiently deeply nested document exhausts the goroutine stack limit and triggers a fatal,
Gitea LFS Deploy-Key Privilege Escalation in gitea.dev
Gitea: draft release attachment disclosure via missing web authorization in gitea.dev
