VDB
KO

GO-2026-4599

Incorrect enforcement of email constraints in crypto/x509

Details

When verifying a certificate chain which contains a certificate containing multiple email address constraints which share common local portions but different domain portions, these constraints will not be properly applied, and only the last constraint will be considered.

Are you affected?

Enter the version of the package you're using.

Affected packages

Go / stdlib
Introduced in: 1.26.0-0 Fixed in: 1.26.1
Fix go get stdlib@v1.26.1

References