# crypto/tls (Go) vulnerabilities

12 known vulnerabilities (1 critical, 2 high, 3 medium, 1 low), with the versions each affects and the releases that fix them.

## At a glance

- Latest release: not known (cve.now hasn't read this package's releases)
- Newest unaffected release: not known without release data
- Registry: https://pkg.go.dev/crypto/tls

## Advisories (12)

### [CVE-2026-56862](https://cve.now/CVE-2026-56862): Limit handshake messages we are willing to accept post-handshake in crypto/tls

- Severity: High 7.5
- Published: Aug 13, 2026
- Affected: fixed in 1.25.13; from 1.26.0-0, fixed in 1.26.6; from 1.27.0-0, fixed in 1.27.0-rc.3.

### [CVE-2026-42505](https://cve.now/CVE-2026-42505): Invoking Encrypted Client Hello privacy leak in crypto/tls

- Severity: Medium 5.3
- Published: Jul 8, 2026
- Affected: fixed in 1.25.12; from 1.26.0-0, fixed in 1.26.5; from 1.27.0-0, fixed in 1.27.0-rc.2.

### [CVE-2026-32283](https://cve.now/CVE-2026-32283): Unauthenticated TLS 1.3 KeyUpdate record can cause persistent connection retention and DoS in crypto/tls

- Severity: High 7.5
- Published: Apr 8, 2026
- Affected: fixed in 1.25.9; from 1.26.0-0, fixed in 1.26.2.

### [CVE-2025-68121](https://cve.now/CVE-2025-68121): Unexpected session resumption in crypto/tls

- Severity: Critical 9.1
- Published: Feb 5, 2026
- Affected: fixed in 1.24.13; from 1.25.0-0, fixed in 1.25.7; from 1.26.0-rc.1, fixed in 1.26.0-rc.3.

### [CVE-2025-61730](https://cve.now/CVE-2025-61730): Handshake messages may be processed at the incorrect encryption level in crypto/tls

- Severity: Medium 5.3
- Published: Jan 28, 2026
- Affected: fixed in 1.24.12; from 1.25.0, fixed in 1.25.6.

### [CVE-2025-58189](https://cve.now/CVE-2025-58189): ALPN negotiation error contains attacker controlled information in crypto/tls

- Severity: Medium 5.3
- Published: Oct 29, 2025
- Affected: fixed in 1.24.8; from 1.25.0, fixed in 1.25.2.

### [CVE-2023-45287](https://cve.now/CVE-2023-45287): Before Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel

- Severity: Unrated
- Published: Dec 5, 2023
- Affected: fixed in 1.20.0.

### [CVE-2023-39322](https://cve.now/CVE-2023-39322): Memory exhaustion in QUIC connection handling in crypto/tls

- Severity: Unrated
- Published: Sep 8, 2023
- Affected: from 1.21.0-0, fixed in 1.21.1.

### [CVE-2023-39321](https://cve.now/CVE-2023-39321): Panic when processing post-handshake message on QUIC connections in crypto/tls

- Severity: Unrated
- Published: Sep 8, 2023
- Affected: from 1.21.0-0, fixed in 1.21.1.

### [CVE-2023-29409](https://cve.now/CVE-2023-29409): Large RSA keys can cause high CPU usage in crypto/tls

- Severity: Unrated
- Published: Aug 2, 2023
- Affected: fixed in 1.19.12; from 1.20.0-0, fixed in 1.20.7; from 1.21.0-0, fixed in 1.21.0-rc.4.

### [CVE-2022-41724](https://cve.now/CVE-2022-41724): Panic on large handshake records in crypto/tls

- Severity: Unrated
- Published: Feb 28, 2023
- Affected: fixed in 1.19.6; from 1.20.0-0, fixed in 1.20.1.

### [CVE-2022-30629](https://cve.now/CVE-2022-30629): Session tickets lack random ticket\_age\_add in crypto/tls

- Severity: Low 3.1
- Published: Aug 9, 2022
- Affected: fixed in 1.17.11; from 1.18.0-0, fixed in 1.18.3.

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/packages/go/crypto/tls
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.