| CVE-2026-111943 |
On most platforms, Go uses the given system root certificates
|
6.8
Medium
|
Oct 21, 2026 |
| CVE-2026-27145 |
(*x509.Certificate).VerifyHostname previously called matchHostnames in a loop over all DNS Subject Alternative Name…
|
6.5
Medium
|
Jun 2, 2026 |
| CVE-2026-32280 |
During chain building, the amount of work that is done is not correctly limited when a large number of intermediate…
|
7.5
High
|
Apr 8, 2026 |
| CVE-2026-32281 |
Validating certificate chains which use policies is unexpectedly inefficient when certificates in the chain contain a…
|
7.5
High
|
Apr 8, 2026 |
| CVE-2026-33810 |
When verifying a certificate chain containing excluded DNS constraints, these constraints are not correctly applied to…
|
7.5
High
|
Apr 8, 2026 |
| CVE-2026-27138 |
Certificate verification can panic when a certificate in the chain has an empty DNS name and another certificate in…
|
5.9
Medium
|
Mar 6, 2026 |
| CVE-2026-27137 |
When verifying a certificate chain which contains a certificate containing multiple email address constraints which…
|
7.5
High
|
Mar 6, 2026 |
| CVE-2025-61727 |
An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf…
|
6.5
Medium
|
Dec 3, 2025 |
| CVE-2025-61729 |
Within HostnameError.Error(), when constructing an error string, there is no limit to the number of hosts that will be…
|
7.5
High
|
Dec 2, 2025 |
| CVE-2025-58188 |
Validating certificate chains which contain DSA public keys can cause programs to panic, due to a interface cast that…
|
7.5
High
|
Oct 29, 2025 |
| CVE-2025-58187 |
Due to the design of the name constraint checking algorithm, the processing time of some inputs scale non-linearly…
|
7.5
High
|
Oct 29, 2025 |
| CVE-2025-22874 |
Calling Verify with a VerifyOptions.KeyUsages that contains ExtKeyUsageAny unintentionally disabledpolicy validation
|
7.5
High
|
Jun 11, 2025 |
| CVE-2025-22865 |
Using ParsePKCS1PrivateKey to parse a RSA key that is missing the CRT values would panic when verifying that the key…
|
7.5
High
|
Jan 28, 2025 |
| CVE-2024-45341 |
A certificate with a URI which has a IPv6 address with a zone ID may incorrectly satisfy a URI name constraint that…
|
6.1
Medium
|
Jan 28, 2025 |
| CVE-2024-24783 |
Verifying a certificate chain which contains a certificate with an unknown public key algorithm will cause…
|
5.9
Medium
|
Mar 5, 2024 |