Vulnerability in Go Standard Library Crypto/tls

CVE-2026-32283

If one side of the TLS connection sends multiple key update messages post-handshake in a single record, the connection can deadlock, causing uncontrolled consumption of resources. This can lead to a denial of service. This only affects TLS…

EPSS: 0.000 (5.2th percentile) — read the EPSS interpretation.

Affected products

References