CVE-2025-58188 is a vulnerability in the Go standard library's crypto/x509 package that triggers an uncaught exception (panic) during certificate chain validation involving DSA public keys. The root cause is an interface cast that assumes the presence of an Equal method, which is not guaranteed, causing the program to crash. This affects Go versions up to 1.25.0. The vulnerability has a CVSS 3.1 base score of 7.5, indicating high severity due to its potential to cause denial of service via application crashes. No patch or official fix information is currently provided by the vendor, and no exploits are known in the wild.

The vulnerability causes applications using the Go crypto/x509 package to panic and crash when validating certificate chains containing DSA public keys. This results in a denial of service condition for affected applications. There is no indication of confidentiality or integrity impact. No known exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, consider avoiding the use of certificate chains containing DSA public keys in affected Go versions or implement application-level recovery from panics during certificate validation.