Upgrade vcert to use GO version 1.26.2+ to fix vunerabilities

[madamorr]

PROBLEM SUMMARY
Several CVE's are resolved in later version of GO, specifically 1.26.2
CVE-2025-58185 - fixed in version 1.25.2
CVE-2025-61726 - fixed in version 1.25.6
CVE-2025-58188 - fixed in version 1.25.2
CVE-2025-61724 - fixed in version 1.25.2
CVE-2025-58186 - fixed in version 1.25.2
CVE-2026-32288 - fixed in version 1.26.2
CVE-2025-68121 - fixed in version 1.26.0-rc.3
CVE-2025-61725 - fixed in version 1.25.2
CVE-2025-58187 - fixed in version 1.25.3
CVE-2026-32280 - fixed in version 1.26.2
CVE-2025-58183 - fixed in version 1.25.2
CVE-2025-61723 - fixed in version 1.25.2
CVE-2025-61727 - fixed in version 1.25.5
CVE-2026-32283 - fixed in version 1.26.2
CVE-2026-32280 - fixed in version 1.26.2
CVE-2025-61729 - fixed in version 1.25.5
CVE-2025-58185 - fixed in version 1.25.2
CVE-2026-32288 - fixed in version 1.26.2
CVE-2025-58183 - fixed in version 1.25.2
CVE-2025-61727 - fixed in version 1.25.2
CVE-2025-58186 - fixed in version 1.25.2
CVE-2025-61725 - fixed in version 1.25.2
CVE-2025-58188 - fixed in version 1.25.2
CVE-2025-58187 - fixed in version 1.25.3
CVE-2025-68121 - fixed in version 1.26.0-rc.3
CVE-2025-61723 - fixed in version 1.25.2

Please update to GO version 1.26.2+

STEPS TO REPRODUCE
Our internal scanner identified the vulnerabilities above.

EXPECTED RESULTS
Minimum CVE's for the product.

ACTUAL RESULTS
List of CVE's above.

ENVIRONMENT DETAILS
Amazon AWS

COMMENTS/WORKAROUNDS
None.

[madamorr]

Other CVE's to take into consideration for package upgrades.

CVE-2025-22869 golang.org/x/crypto Current version 0.32.0 -> 0.35.0
CVE-2025-47913 golang.org/x/aith2 Current version 0.10.0 -> 0.27.0
CVE-2026-33811 go/stdlib 1.26.2 -> 1.26.3
CVE-2026-39820 go/stdlib 1.26.2 -> 1.26.3
CVE-2026-42499 go/stdlib 1.26.2 -> 1.26.3
CVE-2026-33814 go/stdlib 1.26.2 -> 1.26.3
CVE-2026-39836 go/stdlib 1.26.2 -> 1.26.3
CVE-2026-33814 golang.org/x/net Current version 0.34.0 -> 0.53.0

[prakhassh]

Is there a time frame on when a new release with new go version will be available. The current release has some critical vulnerabilities due to the go version