Product by Go Standard Library
Crypto/tls
13 known vulnerabilities in Crypto/tls (Go Standard Library), 0 of them actively exploited (CISA KEV).
Key figures
13
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
1
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2025-68121 | Unexpected session resumption in crypto/tls | 10.0 | |
| High | CVE-2026-97031 | Reject malformed ECH outer extension references in crypto/tls | 7.5 | |
| High | CVE-2023-39322 | Memory exhaustion in QUIC connection handling in crypto/tls | 7.5 | |
| High | CVE-2023-39321 | Panic when processing post-handshake message on QUIC connections in crypto/tls | 7.5 | |
| High | CVE-2023-45287 | Before Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel | 7.5 | |
| High | CVE-2026-56862 | Limit handshake messages we are willing to accept post-handshake in crypto/tls | 7.5 | |
| Medium | CVE-2023-29409 | Large RSA keys can cause high CPU usage in crypto/tls | 5.3 | |
| High | CVE-2022-41724 | Panic on large handshake records in crypto/tls | 7.5 | |
| High | CVE-2026-32283 | Go standard library Crypto/tls: Deadlock | 7.5 | |
| Medium | CVE-2026-42505 | Invoking Encrypted Client Hello privacy leak in crypto/tls | 5.3 | |
| Low | CVE-2022-30629 | Session tickets lack random ticket_age_add in crypto/tls | 3.1 | |
| Medium | CVE-2025-58189 | ALPN negotiation error contains attacker controlled information in crypto/tls | 5.3 | |
| Medium | CVE-2025-61730 | Handshake messages may be processed at the incorrect encryption level in crypto/tls | 5.3 |