- Latest release
- Not known: cve.now hasn't read this package's releases
- Newest unaffected release
- Not known without release data
- Advisories
- 15 · 9 high, 6 medium
- Registry
- pkg.go.dev
Advisories 15
- CVE-2026-111943Medium 6.8
Distrust compromised intermediate certificates in crypto/x509
Affected: fixed in 1.26.10; from 1.27.0-0, fixed in 1.27.3.
- CVE-2026-27145Medium 6.5
Inefficient candidate hostname parsing in crypto/x509
Affected: fixed in 1.25.11; from 1.26.0-0, fixed in 1.26.4.
- CVE-2026-32280High 7.5
Unexpected work during chain building in crypto/x509
Affected: fixed in 1.25.9; from 1.26.0-0, fixed in 1.26.2.
- CVE-2026-32281High 7.5
Inefficient policy validation in crypto/x509
Affected: fixed in 1.25.9; from 1.26.0-0, fixed in 1.26.2.
- CVE-2026-33810High 7.5
Case-sensitive excludedSubtrees name constraints cause Auth Bypass in crypto/x509
Affected: from 1.26.0-0, fixed in 1.26.2.
- CVE-2026-27138Medium 5.9
Panic in name constraint checking for malformed certificates in crypto/x509
Affected: from 1.26.0-0, fixed in 1.26.1.
- CVE-2026-27137High 7.5
Incorrect enforcement of email constraints in crypto/x509
Affected: from 1.26.0-0, fixed in 1.26.1.
- CVE-2025-61727Medium 6.5
Improper application of excluded DNS name constraints when verifying wildcard names in crypto/x509
Affected: fixed in 1.24.11; from 1.25.0, fixed in 1.25.5.
- CVE-2025-61729High 7.5
Excessive resource consumption when printing error string for host certificate validation in crypto/x509
Affected: fixed in 1.24.11; from 1.25.0, fixed in 1.25.5.
- CVE-2025-58188High 7.5
Panic when validating certificates with DSA public keys in crypto/x509
Affected: fixed in 1.24.8; from 1.25.0, fixed in 1.25.2.
- CVE-2025-58187High 7.5
Quadratic complexity when checking name constraints in crypto/x509
Affected: fixed in 1.24.9; from 1.25.0, fixed in 1.25.3.
- CVE-2025-22874High 7.5
Usage of ExtKeyUsageAny disables policy validation in crypto/x509
Affected: from 1.24.0-0, fixed in 1.24.4.
- CVE-2025-22865High 7.5
ParsePKCS1PrivateKey panic with partial keys in crypto/x509
Affected: from 1.24.0-0, fixed in 1.24.0-rc.2.
- CVE-2024-45341Medium 6.1
Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509
Affected: fixed in 1.22.11; from 1.23.0-0, fixed in 1.23.5; from 1.24.0-0, fixed in 1.24.0-rc.2.
- CVE-2024-24783Medium 5.9
Verify panics on certificates with an unknown public key algorithm in crypto/x509
Affected: fixed in 1.21.8; from 1.22.0-0, fixed in 1.22.1.