Skip to contentGo Standard Library Crypto/x509 vulnerabilities
- go standard library crypto/x509Distrust compromised intermediate certificates in crypto/x509CVE-2026-111943Public exploitFix available6.8 Medium
- go standard library crypto/x509, red hat assisted installer for red hat openshift container platform 2, cert manager support for red hat openshift release 1.19 +128 more +130 moreInefficient candidate hostname parsing in crypto/x509CVE-2026-27145Public exploitFix available6.5 Medium
- go standard library crypto/x509, golang go, red hat assisted installer for red hat openshift container platform 2 +103 more +105 moreCase-sensitive excludedSubtrees name constraints cause Auth Bypass in crypto/x509CVE-2026-33810Fix available8.2 High
- go standard library crypto/x509, golang go +1 moreInefficient policy validation in crypto/x509CVE-2026-32281Fix available7.5 High
- go standard library crypto/x509, golang go, red hat assisted installer for red hat openshift container platform 2 +140 more +142 moreUnexpected work during chain building in crypto/x509CVE-2026-32280Fix available7.5 High
- go standard library crypto/x509, golang go +1 morePanic in name constraint checking for malformed certificates in crypto/x509CVE-2026-27138Fix available5.9 Medium
- go standard library crypto/x509, golang go, red hat assisted installer for red hat openshift container platform 2 +99 more +101 moreIncorrect enforcement of email constraints in crypto/x509CVE-2026-27137Fix available7.5 High
- go standard library crypto/x509, golang go +1 moreImproper application of excluded DNS name constraints when verifying wildcard names in crypto/x509CVE-2025-61727Fix available6.5 Medium
- go standard library crypto/x509, golang go +1 moreExcessive resource consumption when printing error string for host certificate validation in crypto/x509CVE-2025-61729Fix available7.5 High
- go standard library crypto/x509, golang go +1 morePanic when validating certificates with DSA public keys in crypto/x509CVE-2025-58188Fix available7.5 High
- go standard library crypto/x509, golang go +1 moreQuadratic complexity when checking name constraints in crypto/x509CVE-2025-58187Fix available7.5 High
- go standard library crypto/x509Usage of ExtKeyUsageAny disables policy validation in crypto/x509CVE-2025-22874Fix available7.5 High
- go standard library crypto/x509ParsePKCS1PrivateKey panic with partial keys in crypto/x509CVE-2025-22865Fix available7.5 High
- go standard library crypto/x509Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509CVE-2024-45341Fix available6.1 Medium
- go standard library crypto/x509Verify panics on certificates with an unknown public key algorithm in crypto/x509CVE-2024-24783Fix available5.9 Medium