Is Go 1.21.13 patched?
Current stable (1.26.4): 100/100
1.21.13 has 24 open critical-or-high vulnerabilities. Run 1.25.10 or later to clear them. See what 1.25.10 fixes →
Summary iPlain-English security status for Go 1.21.13, built from its CVEs, active-exploitation data, end-of-life date and latest release.
Go 1.21.13 is part of the 1.21 release line. 44 known vulnerabilities affect it. The minimum safe version is 1.25.10 — upgrade to it or later to clear the open critical/high issues. The 1.21 line reached end-of-life on 2024-08-13, so it no longer receives security patches. The latest supported Go release is 1.26.4.
Known issues affecting 1.21.13
Exploited first, then by exploitation probability.
CVE-2025-61726 HIGH EPSS 1% → fixed in 1.25.6 CVE-2025-68121 CRITICAL EPSS 1% → fixed in 1.25.7 CVE-2025-61728 MEDIUM EPSS 1% → fixed in 1.25.6 CVE-2026-39836 HIGH EPSS 1% → fixed in 1.26.3 CVE-2025-61723 HIGH EPSS 1% → fixed in 1.25.2 CVE-2026-42499 HIGH EPSS 1% → fixed in 1.26.3 CVE-2026-33814 HIGH EPSS 1% → fixed in 1.26.3 CVE-2026-27143 CRITICAL EPSS 1% → fixed in 1.26.2 CVE-2026-27140 HIGH EPSS 1% → fixed in 1.26.2 CVE-2026-25679 HIGH EPSS 1% → fixed in 1.25.8 CVE-2026-33811 HIGH EPSS 1% → fixed in 1.26.3 CVE-2025-58185 MEDIUM EPSS 0% → fixed in 1.25.2 CVE-2025-61724 MEDIUM EPSS 0% → fixed in 1.25.2 CVE-2025-47906 MEDIUM EPSS 0% → fixed in 1.24.6 CVE-2025-61729 HIGH EPSS 0% → fixed in 1.25.5 CVE-2026-32283 HIGH EPSS 0% → fixed in 1.26.2 CVE-2025-47912 MEDIUM EPSS 0% → fixed in 1.25.2 CVE-2025-58189 MEDIUM EPSS 0% → fixed in 1.25.2 CVE-2026-39825 MEDIUM EPSS 0% → fixed in 1.26.3 CVE-2026-32280 HIGH EPSS 0% → fixed in 1.26.2Other Go versions
Check another release line of Go.
Frequently asked
Is Go 1.21.13 patched?
Go 1.21.13 is end-of-life and no longer receives security patches. Move to 1.26.4.
What version should I upgrade Go 1.21.13 to?
Upgrade Go 1.21.13 to at least 1.25.10 to clear its 24 open critical-or-high vulnerabilities.
When does Go 1.21 reach end-of-life?
Go 1.21 reached end-of-life on 2024-08-13 and no longer receives security patches.
What is the latest version of Go?
The latest supported Go release is 1.26.4.
Is Go 1.21.13 still receiving security updates?
No — Go 1.21.13 is on the 1.21 line, which reached end-of-life on 2024-08-13 and no longer receives security updates. Upgrade to 1.26.4 or later to stay supported.
Informational only, from public data (NVD · CISA KEV · EPSS · endoflife.date), and can lag or miss vendor-specific fixes. Always confirm against Google's official advisory before you patch or upgrade — Go official site ↗