A critical memory-allocation flaw in the Go standard library’s archive/tar package (tracked as CVE-2025-58183) can cause a Go program to perform unbounded allocations when parsing GNU pax-format sparse maps, producing an out-of-memory condition and a possible denial-of-service. Microsoft’s...