Microsoft’s security guidance for CVE-2026-32288 identifies an April 2026 Go archive/tar flaw in which tar.Reader can consume unbounded memory while parsing malicious archives that abuse the old GNU sparse map format. The bug is not a Windows desktop catastrophe, but it is exactly the sort of...