What’s Vulnerable › Products
Go standard library crypto/x509 vulnerabilities
6 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 5 published in the last 12 months.
Check whether your Go standard library crypto/x509 version is affected
Latest Go standard library crypto/x509 vulnerabilities
- CVE-2026-111943 — Distrust compromised intermediate certificates in crypto/x509 (CVSS 6.8)
- CVE-2026-27145 — Inefficient candidate hostname parsing in crypto/x509 (CVSS 6.5)
- CVE-2025-22874 — Usage of ExtKeyUsageAny disables policy validation in crypto/x509 (CVSS 7.5)
- CVE-2025-22865 — ParsePKCS1PrivateKey panic with partial keys in crypto/x509 (CVSS 7.5)
- CVE-2024-45341 — Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509 (CVSS 6.1)
- CVE-2024-24783 — Verify panics on certificates with an unknown public key algorithm in crypto/x509 (CVSS 5.9)