VDB
CVE-2026-111943
CVE-2026-111943
PUBLISHED
CVSS 6.8 MEDIUM
Reported by Go · Published October 21, 2026
On most platforms, Go uses the given system root certificates. However, in some narrower cases, the system trust stores may not be updated without further action. To defend against the narrower set of cases that may remain affected, a denylist was added in crypto/x509 to return an error when calling Verify with any of the known intermediate certificates that are no longer considered to be trustworthy.
Risk Scores
CVSS 3.1
6.8
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Go standard library | crypto/x509 | 0, 1.27.0-0 |
| chainguard | calico-3.31 | * |
| chainguard | gitlab-runner-fips-19.3 | 0 |
| chainguard | mattermost-fips-11.11 | 0 |
| chainguard | gitlab-runner-19.5 | 0 |
| chainguard | rook-fips-1.20 | 0 |
| wolfi | crossplane-provider-family-azure | 0 |
| chainguard | flux-image-reflector-controller-fips | 0 |
| chainguard | crossplane-provider-aws-swf-fips | 0 |
| chainguard | cluster-api-provider-vsphere-fips | 0 |
| amazon:2023 | yq | 0 |
| chainguard | kaniko-fips | 0 |
| wolfi | tigera-operator-1.41 | 0 |
| chainguard | tracee-fips | 0 |
| chainguard | nri-couchbase | 0 |
| chainguard | wasm-pack | 0 |
| chainguard | kube-bench-fips | 0 |
| chainguard | crossplane-provider-aws-rds-fips | 0 |
| chainguard | crossplane-provider-aws-schemas-fips | 0 |
| chainguard | go-discover | 0 |
…and 1789 more
Timeline
- Oct 19, 2026 CVE Published
- Oct 21, 2026 EPSS Score
- Oct 21, 2026 Coalition ESS Score
- Oct 21, 2026 Distribution Patch
- Oct 21, 2026 Security Advisory
- Oct 21, 2026 Distribution Patch
- Oct 21, 2026 Security Advisory
- Oct 21, 2026 Distribution Patch
- Oct 21, 2026 Security Advisory
- Oct 21, 2026 Distribution Patch
- Oct 21, 2026 Security Advisory
- Oct 21, 2026 Distribution Patch