HIGH7.5
GO-2025-4007
Quadratic complexity when checking name constraints in crypto/x509
Quick fix
GO-2025-4007 — stdlib: upgrade to the fixed version with the command below.
go get stdlib@v1.24.9Details
Due to the design of the name constraint checking algorithm, the processing time of some inputs scale non-linearly with respect to the size of the certificate.
This affects programs which validate arbitrary certificate chains.
Are you affected?
Enter the version of the package you're using.