Vulnerability in Go Standard Library Crypto/x509
CVE-2026-32280
During chain building, the amount of work that is done is not correctly limited when a large number of intermediate certificates are passed in VerifyOptions.Intermediates, which can lead to a denial of service. This affects both direct use…
EPSS: 0.000 (6.2th percentile) — read the EPSS interpretation.
Affected products
- Go Standard Library Crypto/x509 — versions 0, 1.26.0-0