Product by Go Standard Library
Crypto/x509
15 known vulnerabilities in Crypto/x509 (Go Standard Library), 0 of them actively exploited (CISA KEV).
Key figures
15
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
0
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| High | CVE-2026-32280 | Unexpected work during chain building in crypto/x509 | 7.5 | |
| High | CVE-2026-111943 | Distrust compromised intermediate certificates in crypto/x509 | 7.4 | |
| Medium | CVE-2026-27145 | Inefficient candidate hostname parsing in crypto/x509 | 6.5 | |
| High | CVE-2026-27137 | Incorrect enforcement of email constraints in crypto/x509 | 5.9 | |
| High | CVE-2025-22865 | ParsePKCS1PrivateKey panic with partial keys in crypto/x509 | 7.5 | |
| High | CVE-2025-61729 | Go standard library Crypto/x509: security vulnerability | 7.5 | |
| High | CVE-2025-58187 | Quadratic complexity when checking name constraints in crypto/x509 | 7.5 | |
| High | CVE-2025-58188 | Panic when validating certificates with DSA public keys in crypto/x509 | 7.5 | |
| Medium | CVE-2024-45341 | Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509 | 6.1 | |
| Medium | CVE-2024-24783 | Verify panics on certificates with an unknown public key algorithm in crypto/x509 | 5.9 | |
| High | CVE-2025-22874 | Usage of ExtKeyUsageAny disables policy validation in crypto/x509 | 7.5 | |
| High | CVE-2026-32281 | Inefficient policy validation in crypto/x509 | 5.9 | |
| Medium | CVE-2026-27138 | Panic in name constraint checking for malformed certificates in crypto/x509 | 5.9 | |
| High | CVE-2026-33810 | Case-sensitive excludedSubtrees name constraints cause Auth Bypass in crypto/x509 | 5.9 | |
| Medium | CVE-2025-61727 | Improper application of excluded DNS name constraints when verifying wildcard names in crypto/x509 | 6.5 |