CR
Product
crypto/x509
by Go standard library · last CVE Oct 21, 2026
7
CVEs
0
On KEV
8.2
Max CVSS
1
New 30D
Severity mix
Critical 0High 5Medium 3Low 0
Watch

Add crypto/x509 to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-33810
8.2
0%
Apr 8
Case-sensitive excludedSubtrees name constraints cause Auth Bypass in crypto/x509
Affected: 1.26.0-0 before 1.26.2
CVE-2026-32280
7.5
1%
Apr 8
Unexpected work during chain building in crypto/x509
Affected: before 1.25.9; 1.26.0-0 before 1.26.2
CVE-2026-32281
7.5
0%
Apr 8
Inefficient policy validation in crypto/x509
Affected: before 1.25.9; 1.26.0-0 before 1.26.2
CVE-2026-27137
7.5
1%
Mar 6
Incorrect enforcement of email constraints in crypto/x509
Affected: 1.26.0-0 before 1.26.1
CVE-2025-61729
7.5
0%
Dec 2
Excessive resource consumption when printing error string for host certificate validation in crypto/x509
Affected: before 1.24.11; 1.25.0 before 1.25.5
Showing 5