HIGH7.5
GO-2022-0434
Panic during certificate parsing on Darwin in crypto/x509
Quick fix
GO-2022-0434 — stdlib: upgrade to the fixed version with the command below.
go get stdlib@v1.18.1Details
Verifying certificate chains containing certificates which are not compliant with RFC 5280 causes Certificate.Verify to panic on macOS.
These chains can be delivered through TLS and can cause a crypto/tls or net/http client to crash.
Are you affected?
Enter the version of the package you're using.