Skip to contentGo Standard Library Crypto/tls vulnerabilities
- go standard library crypto/tlsReject malformed ECH outer extension references in crypto/tlsCVE-2026-97031Fix available7.5 High
- go standard library crypto/tlsLimit handshake messages we are willing to accept post-handshake in crypto/tlsCVE-2026-56862Fix available7.5 High
- go standard library crypto/tls, golang go +1 moreInvoking Encrypted Client Hello privacy leak in crypto/tlsCVE-2026-42505Fix available5.3 Medium
- go standard library crypto/tls, golang go, red hat assisted installer for red hat openshift container platform 2 +117 more +119 moreUnauthenticated TLS 1.3 KeyUpdate record can cause persistent connection retention and DoS in crypto/tlsCVE-2026-32283Fix available7.5 High
- go standard library crypto/tls, golang go +1 moreUnexpected session resumption in crypto/tlsCVE-2025-68121Fix available10.0 Critical
- go standard library crypto/tls, golang go +1 moreHandshake messages may be processed at the incorrect encryption level in crypto/tlsCVE-2025-61730Fix available5.3 Medium
- go standard library crypto/tls, golang go +1 moreALPN negotiation error contains attacker controlled information in crypto/tlsCVE-2025-58189Fix available5.3 Medium
- go standard library crypto/tls, golang go +1 moreBefore Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channelCVE-2023-45287Fix available7.5 High
- go standard library crypto/tls, golang go +1 morePanic when processing post-handshake message on QUIC connections in crypto/tlsCVE-2023-39321Fix available7.5 High
- go standard library crypto/tls, crypto tls, golang go +2 moreMemory exhaustion in QUIC connection handling in crypto/tlsCVE-2023-39322Fix available7.5 High
- go standard library crypto/tls, golang go +1 moreLarge RSA keys can cause high CPU usage in crypto/tlsCVE-2023-29409Public exploitFix available5.3 Medium
- go standard library crypto/tls, golang go +1 morePanic on large handshake records in crypto/tlsCVE-2022-41724Fix available7.5 High
- go standard library crypto/tls, golang go +1 moreSession tickets lack random ticket_age_add in crypto/tlsCVE-2022-30629Fix available3.1 Low