5.9
Moyenne
CVE-2026-27138 Certificate verification can panic when a certificate in the chain has an empty DNS name and another certificate in…
Description
Certificate verification can panic when a certificate in the chain has an empty DNS name and another certificate in the chain has excluded name constraints. This can crash programs that are either directly verifying X.509 certificate chains, or those that use TLS.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| crypto/x509 1.26 | 1.26.0-0 → < 1.26.1 | 1.26.1 |
Autres CVE de crypto/x509
Les 15 CVE de crypto/x509 →
CVE-2026-111943
On most platforms, Go uses the given system root certificates
6.8
Moyenne
CVE-2026-27145
(*x509.Certificate).VerifyHostname previously called matchHostnames in a loop over all DNS Subject Alternative Name…
6.5
Moyenne
CVE-2026-32281
Validating certificate chains which use policies is unexpectedly inefficient when certificates in the chain contain a…
7.5
Élevée
CVE-2026-32280
During chain building, the amount of work that is done is not correctly limited when a large number of intermediate…
7.5
Élevée