CVE Database
/

CVE-2026-32281

Back to search

CVE-2026-32281

Published: Apr 8, 2026

Modified: Apr 13, 2026

PUBLISHED

Description

Validating certificate chains which use policies is unexpectedly inefficient when certificates in the chain contain a very large number of policy mappings, possibly causing denial of service. This only affects validation of otherwise trusted certificate chains, issued by a root CA in the VerifyOptions.Roots CertPool, or in the system certificate pool.

VendorProductVersions

Go standard library

crypto/x509

affected
0 - < 1.25.9
affected
1.26.0-0 - < 1.26.2

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now