What’s Vulnerable › Products
Go standard library crypto/tls vulnerabilities
2 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 2 published in the last 12 months.
Check whether your Go standard library crypto/tls version is affected
Latest Go standard library crypto/tls vulnerabilities
- CVE-2026-97031 — Reject malformed ECH outer extension references in crypto/tls (CVSS 7.5)
- CVE-2026-56862 — Limit handshake messages we are willing to accept post-handshake in crypto/tls (CVSS 7.5)