CVE-2025-58187

Published: Oct 29, 2025

Modified: Nov 20, 2025

PUBLISHED

Description

Due to the design of the name constraint checking algorithm, the processing time of some inputs scale non-linearly with respect to the size of the certificate. This affects programs which validate arbitrary certificate chains.

Vendor	Product	Versions
Go standard library	crypto/x509	affected `0 - < 1.24.9` affected `1.25.0 - < 1.25.3`

References

https://go.dev/issue/75681

https://go.dev/cl/709854

https://groups.google.com/g/golang-announce/c/4Emdl2iQ_bI

https://pkg.go.dev/vuln/GO-2025-4007

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now

CVE-2025-58187

Description

Affected Products

References