The crypto/tls package of Go through 1.16.5 does not properly assert that the type of public key in an X.509 certificate matches the expected type when doing a RSA based key exchange, allowing a malicious TLS server to cause a TLS client to panic.
Improper Certificate Validation
Improper Input Validation
See which of your images are affected by this CVE and how to fix them by signing into Docker Scout.
Sign in