There are new versions of Go which have this CVE patched already published and available for download.