GHSA-m4pr-4j3g-9v7vHighCVSS 7.5

During chain building, the amount of work that is done is not correctly limited when a large...

Published
April 8, 2026
Last Modified
August 14, 2026

🔗 CVE IDs covered (1)

📋 Description

During chain building, the amount of work that is done is not correctly limited when a large number of intermediate certificates are passed in VerifyOptions.Intermediates, which can lead to a denial of service. This affects both direct users of crypto/x509 and users of crypto/tls.

🔗 References (170)