CVE-2025-22865

ParsePKCS1PrivateKey panic with partial keys in crypto/x509

7.5 HighFix available

Using ParsePKCS1PrivateKey to parse a RSA key that is missing the CRT values would panic when verifying that the key is well formed.

Attack profile

How easy it is to exploit

Attack vector: Network
Complexity: Low
Privileges needed: None
User interaction: None

What an attacker can affect

Confidentiality: High
Integrity: None
Availability: None

Exploit likelihood

0.60%Up 0.6 points since Jan 28, 2025

What each source reports

CVE List Score used 7.5

ParsePKCS1PrivateKey panic with partial keys in crypto/x509

Using ParsePKCS1PrivateKey to parse a RSA key that is missing the CRT values would panic when verifying that the key is well formed.

Record: CVE-2025-22865
CVSS 3.1: 7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Updated: 2026-11-02

EUVDEUVD-2025-3033 7.5

Using ParsePKCS1PrivateKey to parse a RSA key that is missing the CRT values would panic when verifying that the key is well formed.

Record: EUVD-2025-3033
CVSS 3.1: 7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Updated: 2026-11-03

GitHub AdvisoriesGHSA-v7qx-rccr-23xm 7.5

Using ParsePKCS1PrivateKey to parse a RSA key that is missing the CRT values would panic when...

Using ParsePKCS1PrivateKey to parse a RSA key that is missing the CRT values would panic when verifying that the key is well formed.

Record: GHSA-v7qx-rccr-23xm
CVSS 3.1: 7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Updated: 2026-11-02

NVD 7.5

Using ParsePKCS1PrivateKey to parse a RSA key that is missing the CRT values would panic when verifying that the key is well formed.

Record: CVE-2025-22865
CVSS 3.1: 7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Updated: 2026-11-02

OSVDEBIAN-CVE-2025-22865 7.5

Using ParsePKCS1PrivateKey to parse a RSA key that is missing the CRT values would panic when verifying that the key is well formed.

Record: DEBIAN-CVE-2025-22865
CVSS 3.1: 7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Updated: 2026-11-02

OSVUBUNTU-CVE-2025-22865 7.5

Using ParsePKCS1PrivateKey to parse a RSA key that is missing the CRT values would panic when verifying that the key is well formed.

Record: UBUNTU-CVE-2025-22865
CVSS 3.1: 7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Updated: 2026-11-06

Show 8 moreShow less

OSVBIT-golang-2025-22865 No score

Using ParsePKCS1PrivateKey to parse a RSA key that is missing the CRT values would panic when verifying that the key is well formed.

Record: BIT-golang-2025-22865
Updated: 2026-11-02

OSV No score

Using ParsePKCS1PrivateKey to parse a RSA key that is missing the CRT values would panic when verifying that the key is well formed.

Record: CVE-2025-22865
Updated: 2026-11-02

OSVGO-2025-3421 No score

ParsePKCS1PrivateKey panic with partial keys in crypto/x509

Using ParsePKCS1PrivateKey to parse a RSA key that is missing the CRT values would panic when verifying that the key is well formed.

Record: GO-2025-3421
Updated: 2026-11-02

OSVopenSUSE-SU-2025:14693-1 No score

go1.24-1.24rc2-1.1 on GA media

These are all security issues fixed in the go1.24-1.24rc2-1.1 package on the GA media of openSUSE Tumbleweed.

Record: openSUSE-SU-2025:14693-1
Updated: 2026-11-02

OSVopenSUSE-SU-2025:14710-1 No score

govulncheck-vulndb-0.0.20250128T150132-1.1 on GA media

These are all security issues fixed in the govulncheck-vulndb-0.0.20250128T150132-1.1 package on the GA media of openSUSE Tumbleweed.

Record: openSUSE-SU-2025:14710-1
Updated: 2026-11-02

OSVSUSE-SU-2025:0285-1 No score

Security update for go1.24

This update for go1.24 fixes the following issues:

This update ships go1.24rc2 (bsc#1236217).

CVE-2024-45341: Properly check for IPv6 hosts in URIs (bsc#1236045)
CVE-2024-45336: Persist header stripping across repeated redirects (bsc#1236046)
CVE-2025-22865: Avoid panic when parsing partial PKCS#1 private keys (bsc#1236361)
CVE-2024-45340: Restore netrc preferences for GOAUTH and fix domain lookup (bsc#1236360)

Record: SUSE-SU-2025:0285-1
Updated: 2026-11-02

OSVSUSE-SU-2025:0297-1 No score

Security update for govulncheck-vulndb

This update for govulncheck-vulndb fixes the following issues:

Update to version 0.0.20250128T150132 2025-01-28T15:01:32Z. Refs jsc#PED-11136 Go CVE Numbering Authority IDs added or updated with aliases:
- GO-2025-3409 CVE-2025-23208 GHSA-c9p4-xwr9-rfhx
- GO-2025-3410 CVE-2025-24337 GHSA-3qc3-mx6x-267h
- GO-2025-3413 CVE-2025-0377 GHSA-wpfp-cm49-9m9q
- GO-2025-3414 CVE-2024-11218 GHSA-5vpc-35f4-r8w6
- GO-2025-3415 CVE-2025-23028 GHSA-9m5p-c77c-f9j7
- GO-2025-3416 CVE-2025-23047 GHSA-h78m-j95m-5356
- GO-2025-3418 CVE-2025-24030 GHSA-j777-63hf-hx76
- GO-2025-3419 CVE-2025-24355 GHSA-v34r-vj4r-38j6
- GO-2025-3422 CVE-2025-24354
Update to version 0.0.20250128T004730 2025-01-28T00:47:30Z. Refs jsc#PED-11136 Go CVE Numbering Authority IDs added or updated with aliases:
- GO-2025-3372 CVE-2024-45339
- GO-2025-3373 CVE-2024-45341
- GO-2025-3383 CVE-2024-45340
- GO-2025-3420 CVE-2024-45336
- GO-2025-3421 CVE-2025-22865
Update to version 0.0.20250117T214834 2025-01-17T21:48:34Z. Refs jsc#PED-11136 Go CVE Numbering Authority IDs added or updated with aliases:
- GO-2025-3392 CVE-2025-20086 GHSA-5m7j-6gc4-ff5g
- GO-2025-3393 CVE-2025-21088 GHSA-8j3q-gc9x-7972
- GO-2025-3394 CVE-2025-20088 GHSA-45v9-w9fh-33j6
- GO-2025-3396 CVE-2024-52594
- GO-2025-3397 CVE-2024-36402 GHSA-8vmr-h7h5-cqhg
- GO-2025-3398 CVE-2024-52791 GHSA-gp86-q8hg-fpxj
- GO-2025-3399 CVE-2024-52602 GHSA-r6jg-jfv6-2fjv
- GO-2025-3400 CVE-2024-56515 GHSA-rcxc-wjgw-579r
- GO-2025-3401 CVE-2024-36403 GHSA-vc2m-hw89-qjxf
- GO-2025-3407 CVE-2025-20621 GHSA-w6xh-c82w-h997
Update to version 0.0.20250115T172141 2025-01-15T17:21:41Z. Refs jsc#PED-11136 Go CVE Numbering Authority IDs added or updated with aliases:
- GO-2025-3381 CVE-2024-56138 GHSA-45v3-38pc-874v
- GO-2025-3382 CVE-2024-51491 GHSA-qjh3-4j3h-vmwp
- GO-2025-3384 CVE-2024-56323 GHSA-32q6-rr98-cjqv
- GO-2025-3390 CVE-2024-53263 GHSA-q6r2-x2cc-vrp7
- GO-2025-3391 CVE-2024-52281 GHSA-2v2w-8v8c-wcm9
Update to version 0.0.20250109T194159 2025-01-09T19:41:59Z. Refs jsc#PED-11136 Go CVE Numbering Authority IDs added or updated with aliases:
- GO-2025-3376 CVE-2025-22149 GHSA-675f-rq2r-jw82
- GO-2025-3377 CVE-2025-22449 GHSA-q8fg-cp3q-5jwm
- GO-2025-3379 CVE-2025-20033 GHSA-2549-xh72-qrpm
- GO-2025-3380 CVE-2025-22445 GHSA-7rgp-4j56-fm79

Record: SUSE-SU-2025:0297-1
Updated: 2026-11-02

OSVSUSE-SU-2025:0429-1 No score

Security update for govulncheck-vulndb

This update for govulncheck-vulndb fixes the following issues:

Update to version 0.0.20250207T224745 2025-02-07T22:47:45Z. Refs jsc#PED-11136 Go CVE Numbering Authority IDs added or updated with aliases:
- GO-2025-3456 CVE-2025-24786 GHSA-9r4c-jwx3-3j76
- GO-2025-3457 CVE-2025-24787 GHSA-c7w4-9wv8-7x7c
- GO-2025-3458 CVE-2025-24366 GHSA-vj7w-3m8c-6vpx
Update to version 0.0.20250206T175003 2025-02-06T17:50:03Z. Refs jsc#PED-11136 Go CVE Numbering Authority IDs added or updated with aliases:
- GO-2023-1867 CVE-2022-47930 GHSA-c58h-qv6g-fw74
- GO-2024-3244 CVE-2024-50354 GHSA-cph5-3pgr-c82g
Update to version 0.0.20250206T165438 2025-02-06T16:54:38Z. Refs jsc#PED-11136 Go CVE Numbering Authority IDs added or updated with aliases:
- GO-2025-3428 CVE-2025-22867
- GO-2025-3447 CVE-2025-22866
Update to version 0.0.20250205T232745 2025-02-05T23:27:45Z. Refs jsc#PED-11136 Go CVE Numbering Authority IDs added or updated with aliases:
- GO-2025-3408
- GO-2025-3448 GHSA-23qp-3c2m-xx6w
- GO-2025-3449 GHSA-mx2j-7cmv-353c
- GO-2025-3450 GHSA-w7wm-2425-7p2h
- GO-2025-3454 GHSA-mj4v-hp69-27x5
- GO-2025-3455 GHSA-vqv5-385r-2hf8
Update to version 0.0.20250205T003520 2025-02-05T00:35:20Z. Refs jsc#PED-11136 Go CVE Numbering Authority IDs added or updated with aliases:
- GO-2025-3451
Update to version 0.0.20250204T220613 2025-02-04T22:06:13Z. Refs jsc#PED-11136 Go CVE Numbering Authority IDs added or updated with aliases:
- GO-2025-3431 CVE-2025-24884 GHSA-hcr5-wv4p-h2g2
- GO-2025-3433 CVE-2025-23216 GHSA-47g2-qmh2-749v
- GO-2025-3434 CVE-2025-24376 GHSA-fc89-jghx-8pvg
- GO-2025-3435 CVE-2025-24784 GHSA-756x-m4mj-q96c
- GO-2025-3436 CVE-2025-24883 GHSA-q26p-9cq4-7fc2
- GO-2025-3437 GHSA-274v-mgcv-cm8j
- GO-2025-3438 CVE-2024-11741 GHSA-wxcc-2f3q-4h58
- GO-2025-3442 CVE-2025-24371 GHSA-22qq-3xwm-r5x4
- GO-2025-3443 GHSA-r3r4-g7hq-pq4f
- GO-2025-3444 CVE-2024-35177
- GO-2025-3445 CVE-2024-47770
Use standard RPM macros to unpack the source and populate a working directory. Fixes build with RPM 4.20.
Update to version 0.0.20250130T185858 2025-01-30T18:58:58Z. Refs jsc#PED-11136 Go CVE Numbering Authority IDs added or updated with aliases:
- GO-2024-2842 CVE-2024-3727 GHSA-6wvf-f2vw-3425
- GO-2024-3181 CVE-2024-9313 GHSA-x5q3-c8rm-w787
- GO-2024-3188 CVE-2024-9312 GHSA-4gfw-wf7c-w6g2
- GO-2025-3372 CVE-2024-45339 GHSA-6wxm-mpqj-6jpf
- GO-2025-3373 CVE-2024-45341
- GO-2025-3383 CVE-2024-45340
- GO-2025-3408
- GO-2025-3412 CVE-2024-10846 GHSA-36gq-35j3-p9r9
- GO-2025-3420 CVE-2024-45336
- GO-2025-3421 CVE-2025-22865
- GO-2025-3424 CVE-2025-24369
- GO-2025-3426 CVE-2025-0750 GHSA-hp5j-2585-qx6g
- GO-2025-3427 CVE-2024-13484 GHSA-58fx-7v9q-3g56

Record: SUSE-SU-2025:0429-1
Updated: 2026-11-02

Affected products

go standard library crypto/x509

Affected packages

Affected packages
Package	Affected	Fixed
`golang` Bitnami	1.24.0-0 up to 1.24.0-rc.2	1.24.0-rc.2
`golang-1.24` Debian:13	before 1.24~rc2-1	1.24~rc2-1
`stdlib` Go	1.24.0-0 up to 1.24.0-rc.2	1.24.0-rc.2
`go1.24` SUSE:Linux Enterprise Module for Development Tools 15 SP6 From an advisory covering 4 CVEs	before 1.24rc2-150000.1.3.1	1.24rc2-150000.1.3.1
`go1.24` SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS From an advisory covering 4 CVEs	before 1.24rc2-150000.1.3.1	1.24rc2-150000.1.3.1
`go1.24` SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS From an advisory covering 4 CVEs	before 1.24rc2-150000.1.3.1	1.24rc2-150000.1.3.1
`go1.24` SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS From an advisory covering 4 CVEs	before 1.24rc2-150000.1.3.1	1.24rc2-150000.1.3.1
`go1.24` SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS From an advisory covering 4 CVEs	before 1.24rc2-150000.1.3.1	1.24rc2-150000.1.3.1
`go1.24` SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS From an advisory covering 4 CVEs	before 1.24rc2-150000.1.3.1	1.24rc2-150000.1.3.1
`go1.24` SUSE:Linux Enterprise Server 15 SP3-LTSS From an advisory covering 4 CVEs	before 1.24rc2-150000.1.3.1	1.24rc2-150000.1.3.1

Show 43 moreShow less

Affected packages
Package	Affected	Fixed
`go1.24` SUSE:Linux Enterprise Server 15 SP4-LTSS From an advisory covering 4 CVEs	before 1.24rc2-150000.1.3.1	1.24rc2-150000.1.3.1
`go1.24` SUSE:Linux Enterprise Server 15 SP5-LTSS From an advisory covering 4 CVEs	before 1.24rc2-150000.1.3.1	1.24rc2-150000.1.3.1
`go1.24` SUSE:Linux Enterprise Server for SAP Applications 15 SP3 From an advisory covering 4 CVEs	before 1.24rc2-150000.1.3.1	1.24rc2-150000.1.3.1
`go1.24` SUSE:Linux Enterprise Server for SAP Applications 15 SP4 From an advisory covering 4 CVEs	before 1.24rc2-150000.1.3.1	1.24rc2-150000.1.3.1
`go1.24` SUSE:Linux Enterprise Server for SAP Applications 15 SP5 From an advisory covering 4 CVEs	before 1.24rc2-150000.1.3.1	1.24rc2-150000.1.3.1
`go1.24` SUSE:Enterprise Storage 7.1 From an advisory covering 4 CVEs	before 1.24rc2-150000.1.3.1	1.24rc2-150000.1.3.1
`go1.24` openSUSE:Leap 15.6 From an advisory covering 4 CVEs	before 1.24rc2-150000.1.3.1	1.24rc2-150000.1.3.1
`govulncheck-vulndb` SUSE:Linux Enterprise Module for Package Hub 15 SP6 From an advisory covering 33 CVEs	before 0.0.20250128T150132-150000.1.29.1	0.0.20250128T150132-150000.1.29.1
`govulncheck-vulndb` openSUSE:Leap 15.6 From an advisory covering 33 CVEs	before 0.0.20250128T150132-150000.1.29.1	0.0.20250128T150132-150000.1.29.1
`govulncheck-vulndb` SUSE:Linux Enterprise Module for Package Hub 15 SP6 From an advisory covering 28 CVEs	before 0.0.20250207T224745-150000.1.32.1	0.0.20250207T224745-150000.1.32.1
`govulncheck-vulndb` openSUSE:Leap 15.6 From an advisory covering 28 CVEs	before 0.0.20250207T224745-150000.1.32.1	0.0.20250207T224745-150000.1.32.1
`golang-1.10` Ubuntu:14.04:LTS	All versions, plus listed versions 1.10.4-2ubuntu1~14.04.1	None known
`golang-1.10` Ubuntu:16.04:LTS	All versions, plus listed versions 1.10.4-2ubuntu1~16.04.11.10.4-2ubuntu1~16.04.2	None known
`golang-1.6` Ubuntu:16.04:LTS	All versions, plus listed versions 1.6-0ubuntu11.6-0ubuntu21.6-0ubuntu31.6-0ubuntu41.6-0ubuntu5 Show 5 moreShow less 1.6.1-0ubuntu11.6.2-0ubuntu5~16.041.6.2-0ubuntu5~16.04.21.6.2-0ubuntu5~16.04.31.6.2-0ubuntu5~16.04.4	None known
`golang-1.13` Ubuntu:Pro:16.04:LTS	All versions, plus listed versions 1.13.8-1ubuntu1~16.04.21.13.8-1ubuntu1~16.04.31.13.8-1ubuntu1~16.04.3+esm21.13.8-1ubuntu1~16.04.3+esm3	None known
`golang-1.18` Ubuntu:Pro:16.04:LTS	All versions, plus listed versions 1.18.1-1ubuntu1~16.04.61.18.1-1ubuntu1~16.04.6+esm1	None known
`golang-1.10` Ubuntu:18.04:LTS	All versions, plus listed versions 1.10~rc1-11.10~rc1-1ubuntu11.10~rc1-2ubuntu11.10~rc2-1ubuntu11.10-1ubuntu11.10.1-1ubuntu21.10.4-2ubuntu1~18.04.11.10.4-2ubuntu1~18.04.2	None known
`golang-1.13` Ubuntu:Pro:18.04:LTS	All versions, plus listed versions 1.13.8-1ubuntu1~18.04.21.13.8-1ubuntu1~18.04.31.13.8-1ubuntu1~18.04.41.13.8-1ubuntu1~18.04.4+esm1	None known
`golang-1.16` Ubuntu:Pro:18.04:LTS	All versions, plus listed versions 1.16.2-0ubuntu1~18.04.21.16.2-0ubuntu1~18.04.2+esm1	None known
`golang-1.18` Ubuntu:Pro:18.04:LTS	All versions, plus listed versions 1.18.1-1ubuntu1~18.04.31.18.1-1ubuntu1~18.04.41.18.1-1ubuntu1~18.04.4+esm1	None known
`golang-1.8` Ubuntu:18.04:LTS	All versions, plus listed versions 1.8.3-2ubuntu11.8.3-2ubuntu1.18.04.1	None known
`golang-1.9` Ubuntu:18.04:LTS	All versions, plus listed versions 1.9.1-2ubuntu11.9.2-1ubuntu11.9.2-3ubuntu11.9.3-1ubuntu11.9.4-1ubuntu1	None known
`golang-1.13` Ubuntu:20.04:LTS	All versions, plus listed versions 1.13.1-1ubuntu11.13.3-1ubuntu11.13.4-1ubuntu11.13.5-1ubuntu11.13.6-1ubuntu1 Show 5 moreShow less 1.13.6-2ubuntu11.13.7-1ubuntu11.13.8-1ubuntu11.13.8-1ubuntu1.11.13.8-1ubuntu1.2	None known
`golang-1.14` Ubuntu:20.04:LTS	All versions, plus listed versions 1.14~beta1-11.14~beta1-21.14~rc1-11.14-11.14.1-1 Show 4 moreShow less 1.14.2-11.14.2-1ubuntu11.14.3-2ubuntu2~20.04.11.14.3-2ubuntu2~20.04.2	None known
`golang-1.16` Ubuntu:Pro:20.04:LTS	All versions, plus listed versions 1.16.2-0ubuntu1~20.041.16.2-0ubuntu1~20.04.11.16.2-0ubuntu1~20.04.1+esm1	None known
`golang-1.18` Ubuntu:20.04:LTS	All versions, plus listed versions 1.18.1-1ubuntu1~20.04.11.18.1-1ubuntu1~20.04.21.18.1-1ubuntu1~20.04.3	None known
`golang-1.20` Ubuntu:20.04:LTS	All versions, plus listed versions 1.20.3-1ubuntu0.1~20.041.20.3-1ubuntu0.1~20.04.1	None known
`golang-1.21` Ubuntu:20.04:LTS	All versions, plus listed versions 1.21.1-1~ubuntu20.04.11.21.1-1~ubuntu20.04.21.21.1-1~ubuntu20.04.3	None known
`golang-1.17` Ubuntu:22.04:LTS	All versions, plus listed versions 1.17-1ubuntu21.17.3-1ubuntu11.17.3-1ubuntu21.17.13-3ubuntu11.17.13-3ubuntu1.21.17.13-3ubuntu1.3	None known
`golang-1.18` Ubuntu:22.04:LTS	All versions, plus listed versions 1.18~beta1-0ubuntu11.18~beta2-1ubuntu11.18~beta2-1ubuntu21.18~rc1-1ubuntu11.18-1ubuntu1 Show 4 moreShow less 1.18.1-1ubuntu11.18.1-1ubuntu1.11.18.1-1ubuntu1.21.18.1-1ubuntu1.3	None known
`golang-1.20` Ubuntu:22.04:LTS	All versions, plus listed versions 1.20.3-1ubuntu0.1~22.041.20.3-1ubuntu0.1~22.04.1	None known
`golang-1.21` Ubuntu:22.04:LTS	All versions, plus listed versions 1.21.1-1~ubuntu22.04.11.21.1-1~ubuntu22.04.21.21.1-1~ubuntu22.04.31.21.1-1~ubuntu22.04.4	None known
`golang-1.23` Ubuntu:22.04:LTS	All versions, plus listed versions 1.23.1-1~22.041.23.1-1~22.04.21.23.1-1~22.04.3	None known
`golang-1.24` Ubuntu:22.04:LTS	All versions, plus listed versions 1.24.4-1ubuntu1~22.04.11.24.4-1ubuntu1~22.04.21.24.13-2~22.04.11.24.13-2~22.04.2	None known
`golang-1.13` Ubuntu:Pro:22.04:LTS	All versions, plus listed versions 1.13.8-1ubuntu21.13.8-1ubuntu2.22.04.11.13.8-1ubuntu2.22.04.1+esm11.13.8-1ubuntu2.22.04.2	None known
`golang-1.21` Ubuntu:24.04:LTS	All versions, plus listed versions 1.21.1-11.21.3-11.21.4-11.21.5-11.21.6-1 Show 6 moreShow less 1.21.7-11.21.7-21.21.8-11.21.8-1build11.21.9-11.21.9-1ubuntu0.1	None known
`golang-1.23` Ubuntu:24.04:LTS	All versions, plus listed versions 1.23.1-1~24.041.23.1-1~24.04.1	None known
`golang-1.24` Ubuntu:24.04:LTS	All versions, plus listed versions 1.24.4-1ubuntu1~24.04.11.24.4-1ubuntu1~24.04.21.24.13-2~24.04.1	None known
`golang-1.23` Ubuntu:25.10	All versions, plus listed versions 1.23.8-11.23.10-11.23.10-1ubuntu0.2	None known
`golang-1.24` Ubuntu:25.10	All versions, plus listed versions 1.24.2-11.24.2-21.24.4-11.24.4-1ubuntu1	None known
`golang-1.23` Ubuntu:26.04:LTS	All versions, plus listed versions 1.23.10-1	None known
`go1.24` openSUSE:Tumbleweed From an advisory covering 4 CVEs	before 1.24rc2-1.1	1.24rc2-1.1
`govulncheck-vulndb` openSUSE:Tumbleweed From an advisory covering 14 CVEs	before 0.0.20250128T150132-1.1	0.0.20250128T150132-1.1

History

History
Recorded	Changed	Sources
Nov 6, 2026	affected	OSV
Nov 6, 2026	affected, facts
Nov 3, 2026	aliases	EUVD
Nov 2, 2026	first indexed	CVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2025-22865 is a high vulnerability (CVSS 7.5) in Go Standard Library Crypto/x509, published January 24, 2025. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.60%, the 48th percentile. Fixed in golang 1.24.0-rc.2.

References

Show 68 moreShow less