Vulnerability in Go Standard Library Crypto/tls
CVE-2026-32283
If one side of the TLS connection sends multiple key update messages post-handshake in a single record, the connection can deadlock, causing uncontrolled consumption of resources. This can lead to a denial of service. This only affects TLS…
EPSS: 0.000 (5.2th percentile) — read the EPSS interpretation.
Affected products
- Go Standard Library Crypto/tls — versions 0, 1.26.0-0