VDB
GO-2026-4866
GO-2026-4866
PUBLISHED
Case-sensitive excludedSubtrees name constraints cause Auth Bypass in crypto/x509
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| wolfi | aws-network-policy-agent | 0, 0, 0 |
| wolfi | dkron | 0, 0, 0 |
| wolfi | victoriametrics-cluster | 0, 0, 0 |
| wolfi | gh | 0, 0, 0 |
| chainguard | atlas-1.1-fips | 0, 0 |
| chainguard | envoy-ratelimit | 0, 0 |
| chainguard | dbmate | 0, 0 |
| wolfi | pluto | 0, 0, 0 |
| chainguard | commercial-chainloop-cli | 0, 0 |
| wolfi | go-1.26 | 0, 0, 0 |
| chainguard | commercial-chainloop-backend | 0, 0 |
| wolfi | nova | 0, 0, 0 |
| wolfi | secrets-store-csi-driver-provider-aws | 0, 0, 0 |
| chainguard | aws-iam-authenticator | 0, 0 |
| wolfi | apko | 0, 0, 0 |
| chainguard | goreleaser | 0, 0 |
| wolfi | flux-image-automation-controller | 0, 0, 0 |
| chainguard | pluto | 0, 0, 0 |
| wolfi | mariadb-operator | 0, 0, 0 |
| chainguard | flux-image-reflector-controller | 0, 0 |
…and 177 more
Timeline
- Apr 7, 2026 CVE Published
- Sep 1, 2026 CVE Updated