VDB

GHSA-fv83-x2xw-2j55

GHSA-fv83-x2xw-2j55 PUBLISHED CVSS 7.5 HIGH

When verifying a certificate chain containing excluded DNS constraints, these constraints are not correctly applied to wildcard DNS SANs which use a different case than the constraint. This only affects validation of otherwise trusted certificate chains, issued by a root CA in the VerifyOptions.Roots CertPool, or in the system certificate pool.

Risk Scores

CVSS 3.1
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Affected Products

VendorProductVersions
wolfiflux-2.80, 0, 0
chainguardmountpoint-s3-csi-driver-2.50, 0, 0
wolfimountpoint-s3-csi-driver-2.50, 0, 0
chainguardmariadb-operator-fips0, 0, 0
wolfiflux-operator0, 0, 0
chainguardkube-logging-logging-operator-4.10, 0, 0
wolfidkron0, 0, 0
chainguardgh0, 0, 0
chainguardcilium-certgen-fips-0.40, 0, 0
wolfikarpenter-1.100, 0, 0
wolfinewrelic-infra-operator0, 0, 0
wolfinova0, 0, 0
wolfipolaris0, 0, 0
chainguardcilium-fips-1.170, 0, 0
chainguardk8s-metacollector-fips0, 0, 0
wolfidataplaneapi0, 0, 0
chainguardage*, *, *
chainguardingress-nginx-controller-fips-1.150, 0, 0
chainguardaws-eks-pod-identity-agent-fips0, 0, 0
chainguardaws-privateca-issuer-fips0, 0, 0

…and 181 more

Timeline

  • Apr 8, 2026 CVE Published
  • Apr 21, 2026 Security Advisory
  • Aug 6, 2026 Distribution Patch
  • Aug 6, 2026 Distribution Patch
  • Aug 6, 2026 Distribution Patch
  • Aug 6, 2026 Distribution Patch
  • Aug 6, 2026 Distribution Patch
  • Aug 6, 2026 Distribution Patch
  • Aug 6, 2026 Distribution Patch
  • Aug 6, 2026 Distribution Patch
  • Aug 6, 2026 Distribution Patch
  • Aug 6, 2026 Distribution Patch

References

…and 34 more

Open in Interactive Console →
$ Console Community · 50/day Open console ›