Fix security vulnerabilities in Devbox due to outdated version of Go #2668
Description
What problem are you trying to solve?
Devbox currently uses Go 1.24.0, which is 6 months old now and has several critical and high vulnerabilities that have already been fixed in later revisions of Go:
- Critical: CVE-2025-22871
- High: CVE-2025-4674, CVE-2025-22874, CVE-2025-47907
The version of Go used by Devbox has only been updated 7 times in the last 3 years.
What solution would you like?
Go needs to be updated to the latest version, and kept up-to-date on an ongoing basis.
Alternatives you've considered
No response