Threats tagged 'bit-golang-2026-33810'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
High	7.5	EPSS 0.3%	CVE-2026-33810Go standard library crypto/x509 · Improper Certificate Validation High7.5EPSS 0.3%2026-04-08CVE Database V5CVE-2026-33810 When verifying a certificate chain containing excluded DNS constraints, these constraints are not correctly applied to wildcard DNS SANs which use a different case than the constraint. This only affects validation of otherwise trusted certificate chains, issued by a root CA in the VerifyOptions.Roots CertPool, or in the system certificate pool. EPSS 0.3%Vulnerability CWE-295 #ghsa-fv83-x2xw-2j55 #bit-golang-2026-33810	CVE Database V5	2026-04-08

Page 1 of 1