Vulnerability in Go Standard Library Crypto/x509
CVE-2026-32281
Validating certificate chains which use policies is unexpectedly inefficient when certificates in the chain contain a very large number of policy mappings, possibly causing denial of service. This only affects validation of otherwise trust…
EPSS: 0.000 (6.4th percentile) — read the EPSS interpretation.
Affected products
- Go Standard Library Crypto/x509 — versions 0, 1.26.0-0