A discrepancy between how Go and C/C++ comments were parsed allowed for code smuggling into the resulting cgo binary.
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-61732.json"