https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-09-28T07:52:45.210608+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2026-27137 CVE-2026-27137 — Incorrect enforcement of email constraints in crypto/x509 2026-09-28T07:52:45.233419+00:00

Affected: Go standard library crypto/x509, Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 10.0 Extended Update Support, Red Hat Enterprise Linux 9, Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions, Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions, Red Hat Enterprise Linux 9.6 Extended Update Support, Red Hat OpenStack Platform 16.2, Red Hat OpenStack Platform 17.1 for RHEL 9, Red Hat OpenStack Services on OpenShift 18.0 and 91 more

When verifying a certificate chain which contains a certificate containing multiple email address constraints which share common local portions but different domain portions, these constraints will not be properly applied, and only the last constraint will be considered.

 https://vulnerability.circl.lu/vuln/rhsa-2026:5110 RHSA-2026:5110 — Red Hat Security Advisory: Multicluster Global Hub 1.5.4 security update 2026-09-28T07:52:45.234765+00:00

golang: net/url: Memory exhaustion in query parameter parsing in net/url golang: archive/zip: Excessive CPU consumption when building archive index in archive/zip crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate crypto/tls: crypto/tls: Incorrect certificate validation during TLS session resumption net/url: Incorrect parsing of IPv6 host literals in net/url crypto/x509: Incorrect enforcement of email constraints in crypto/x509 nats-server: WebSockets pre-auth memory DoS