VDB
Sign up
HIGH7.5

GO-2025-3421

ParsePKCS1PrivateKey panic with partial keys in crypto/x509

Quick fix

GO-2025-3421 — stdlib: upgrade to the fixed version with the command below.

go get stdlib@v1.24.0-rc.2

Details

Using ParsePKCS1PrivateKey to parse a RSA key that is missing the CRT values would panic when verifying that the key is well formed.

Are you affected?

Enter the version of the package you're using.

Affected packages

Go/stdlib
Introduced in: 1.24.0-0Fixed in: 1.24.0-rc.2
Fixgo get stdlib@v1.24.0-rc.2

References