GO-2025-4175 — Vulnetix

GO-2025-4175 PUBLISHED

Improper application of excluded DNS name constraints when verifying wildcard names in crypto/x509

Affected Products

Vendor	Product	Versions
Go	stdlib	0, 1.25.0, 0

Timeline

Dec 2, 2025 CVE Published
May 15, 2026 CVE Updated

References

https://go.dev/cl/723900 patch
https://go.dev/issue/76442 report
https://groups.google.com/g/golang-announce/c/8FJoBkPddm4 url

Open in Interactive Console →

$ Console Community · 100/wk Open console ›