CVE-2026-32280

ADVISORY - golang

Summary

During chain building, the amount of work that is done is not correctly limited when a large number of intermediate certificates are passed in VerifyOptions.Intermediates, which can lead to a denial of service. This affects both direct users of crypto/x509 and users of crypto/tls.

Common Weakness Enumeration (CWE)

Impacted images

Advisories

GoLang

CREATED

5 hours ago

UPDATED

5 hours ago

ADVISORY IDGO-2026-4947⁠

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

RATING UNAVAILABLE FROM ADVISORY

Package	Type	OS Name	OS Version	Affected Ranges	Fix Versions
stdlib	golang	-	-	>=1.26.0-0,<1.26.2	1.26.2
stdlib	golang	-	-	<1.25.9	1.25.9

Severity and metrics

No CVSS data available from this advisory.