CVE-2025-61723

Published: Oct 29, 2025

Modified: Nov 4, 2025

PUBLISHED

Description

The processing time for parsing some invalid inputs scales non-linearly with respect to the size of the input. This affects programs which parse untrusted PEM inputs.

Vendor	Product	Versions
Go standard library	encoding/pem	affected `0 - < 1.24.8` affected `1.25.0 - < 1.25.2`

References

https://go.dev/issue/75676

https://go.dev/cl/709858

https://groups.google.com/g/golang-announce/c/4Emdl2iQ_bI

https://pkg.go.dev/vuln/GO-2025-4009

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now

CVE-2025-61723

Description

Affected Products

References