VDB
GO-2025-4007
GO-2025-4007
PUBLISHED
Quadratic complexity when checking name constraints in crypto/x509
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| wolfi | kustomize | 0, 0, 0 |
| chainguard | kapp | 0, 0, 0 |
| chainguard | delve | 0, 0, 0 |
| chainguard | vault-secrets-webhook | 0, 0, 0 |
| wolfi | skopeo | 0, 0, 0 |
| chainguard | cluster-api-fips-1.9 | 0, 0, 0 |
| chainguard | karpenter-0.34 | 0, 0, 0 |
| wolfi | terraform-provider-azuread | 0, 0, 0 |
| chainguard | azure-ipam | 0, 0, 0 |
| wolfi | mongodb-kubernetes-operator | 0, 0, 0 |
| wolfi | secrets-store-csi-driver | 0, 0, 0 |
| wolfi | hydra | 0, 0, 0 |
| chainguard | cri-tools | 0, 0, 0 |
| chainguard | stakater-reloader-0.0.119 | 0, 0, 0 |
| wolfi | rootlesskit | 0, 0, 0 |
| chainguard | prometheus-mongodb-exporter | 0, 0, 0 |
| wolfi | kwok | 0, 0, 0 |
| chainguard | temporal | 0, 0, 0 |
| chainguard | seaweedfs-operator-fips | 0, 0, 0 |
| chainguard | nats | 0, 0, 0 |
…and 1164 more
Timeline
- Oct 29, 2025 CVE Published
- May 15, 2026 CVE Updated