CR
Product
crypto/x509
7
CVEs
0
On KEV
8.2
Max CVSS
1
New 30D
Severity mix
Critical 0High 5Medium 3Low 0
Watch
Add crypto/x509 to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-27145 | 6.5 | Jun 2 | Inefficient candidate hostname parsing in crypto/x509 Affected: before 1.25.11; 1.26.0-0 before 1.26.4 |
| CVE-2025-61727 | 6.5 | Dec 3 | Improper application of excluded DNS name constraints when verifying wildcard names in crypto/x509 Affected: before 1.24.11; 1.25.0 before 1.25.5 |
| CVE-2026-27138 | 5.9 | Mar 6 | Panic in name constraint checking for malformed certificates in crypto/x509 Affected: 1.26.0-0 before 1.26.1 |
Showing 3