https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-09T08:29:48.328176+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2025-61727 CVE-2025-61727 — Improper application of excluded DNS name constraints when verifying wildcard names in crypto/x509 2026-10-09T08:29:48.333378+00:00

Affected: Go standard library crypto/x509

An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. For example a constraint that excludes the subdomain test.example.com does not prevent a leaf certificate from claiming the SAN *.example.com.

 https://vulnerability.circl.lu/vuln/ghsa-f6x5-jh6r-wrfv GHSA-f6x5-jh6r-wrfv — golang.org/x/crypto/ssh/agent vulnerable to panic if message is malformed due to out of bounds read 2026-10-09T08:29:48.333565+00:00

Affected: Go: golang.org/x/crypto

SSH Agent servers do not validate the size of messages when processing new identity requests, which may cause the program to panic if the message is malformed due to an out of bounds read.