| CVE-2026-111943 |
On most platforms, Go uses the given system root certificates
|
6.8
Moyenne
|
21 oct. 2026 |
| CVE-2026-27145 |
(*x509.Certificate).VerifyHostname previously called matchHostnames in a loop over all DNS Subject Alternative Name…
|
6.5
Moyenne
|
2 juin 2026 |
| CVE-2026-32280 |
During chain building, the amount of work that is done is not correctly limited when a large number of intermediate…
|
7.5
Élevée
|
8 avr. 2026 |
| CVE-2026-32281 |
Validating certificate chains which use policies is unexpectedly inefficient when certificates in the chain contain a…
|
7.5
Élevée
|
8 avr. 2026 |
| CVE-2026-33810 |
When verifying a certificate chain containing excluded DNS constraints, these constraints are not correctly applied to…
|
7.5
Élevée
|
8 avr. 2026 |
| CVE-2026-27138 |
Certificate verification can panic when a certificate in the chain has an empty DNS name and another certificate in…
|
5.9
Moyenne
|
6 mars 2026 |
| CVE-2026-27137 |
When verifying a certificate chain which contains a certificate containing multiple email address constraints which…
|
7.5
Élevée
|
6 mars 2026 |
| CVE-2025-61727 |
An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf…
|
6.5
Moyenne
|
3 déc. 2025 |
| CVE-2025-61729 |
Within HostnameError.Error(), when constructing an error string, there is no limit to the number of hosts that will be…
|
7.5
Élevée
|
2 déc. 2025 |
| CVE-2025-58188 |
Validating certificate chains which contain DSA public keys can cause programs to panic, due to a interface cast that…
|
7.5
Élevée
|
29 oct. 2025 |
| CVE-2025-58187 |
Due to the design of the name constraint checking algorithm, the processing time of some inputs scale non-linearly…
|
7.5
Élevée
|
29 oct. 2025 |
| CVE-2025-22874 |
Calling Verify with a VerifyOptions.KeyUsages that contains ExtKeyUsageAny unintentionally disabledpolicy validation
|
7.5
Élevée
|
11 juin 2025 |
| CVE-2025-22865 |
Using ParsePKCS1PrivateKey to parse a RSA key that is missing the CRT values would panic when verifying that the key…
|
7.5
Élevée
|
28 janv. 2025 |
| CVE-2024-45341 |
A certificate with a URI which has a IPv6 address with a zone ID may incorrectly satisfy a URI name constraint that…
|
6.1
Moyenne
|
28 janv. 2025 |
| CVE-2024-24783 |
Verifying a certificate chain which contains a certificate with an unknown public key algorithm will cause…
|
5.9
Moyenne
|
5 mars 2024 |