GO-2025-3749 — Vulnetix

GO-2025-3749 PUBLISHED

Usage of ExtKeyUsageAny disables policy validation in crypto/x509

Affected Products

Vendor	Product	Versions
Go	stdlib	1.24.0-0, 1.24.0-0

Timeline

Jun 11, 2025 CVE Published
Feb 17, 2026 CVE Updated

References

https://go.dev/cl/670375 patch
https://go.dev/issue/73612 report
https://groups.google.com/g/golang-announce/c/ufZ8WpEsA3A url

Open in Interactive Console →

$ Console Community · 100/wk Open console ›