Most recent entries from all https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 09 Oct 2026 08:29:48 +0000 CVE-2025-61727 — Improper application of excluded DNS name constraints when verifying wildcard names in crypto/x509 https://vulnerability.circl.lu/vuln/cve-2025-61727 <p><strong>Affected:</strong> Go standard library crypto/x509</p> <p>An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. For example a constraint that excludes the subdomain test.example.com does not prevent a leaf certificate from claiming the SAN *.example.com.</p> <p><strong>Affected:</strong> Go standard library crypto/x509</p> <p>An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. For example a constraint that excludes the subdomain test.example.com does not prevent a leaf certificate from claiming the SAN *.example.com.</p> https://vulnerability.circl.lu/vuln/cve-2025-61727 GHSA-f6x5-jh6r-wrfv — golang.org/x/crypto/ssh/agent vulnerable to panic if message is malformed due to out of bounds read https://vulnerability.circl.lu/vuln/ghsa-f6x5-jh6r-wrfv <p><strong>Affected:</strong> Go: golang.org/x/crypto</p> <p>SSH Agent servers do not validate the size of messages when processing new identity requests, which may cause the program to panic if the message is malformed due to an out of bounds read.</p> <p><strong>Affected:</strong> Go: golang.org/x/crypto</p> <p>SSH Agent servers do not validate the size of messages when processing new identity requests, which may cause the program to panic if the message is malformed due to an out of bounds read.</p> https://vulnerability.circl.lu/vuln/ghsa-f6x5-jh6r-wrfv