| Package | Affected versions | Patched versions |
|---|---|---|
| stdlib | ≥ 1.26.0-0, < 1.26.2< 1.25.9 | 1.26.21.25.9 |
| go | ≥ 1.26.0, < 1.26.2< 1.25.9 | 1.26.21.25.9 |
During chain building, the amount of work that is done is not correctly limited when a large number of intermediate certificates are passed in VerifyOptions.Intermediates, which can lead to a denial of service. This affects both direct users of crypto/x509 and users of crypto/tls.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free