cmd/go: arbitrary code execution during “go get” · Issue #23672 · golang/go
Go get downloads and builds source code. It is not meant to execute arbitrary code. When cgo is enabled, the build step during “go get” invokes the host C compiler, gcc or clang, adding compiler fl...