VDB
KO

GO-2026-4947

Unexpected work during chain building in crypto/x509

Details

During chain building, the amount of work that is done is not correctly limited when a large number of intermediate certificates are passed in VerifyOptions.Intermediates, which can lead to a denial of service. This affects both direct users of crypto/x509 and users of crypto/tls.

Are you affected?

Enter the version of the package you're using.

Affected packages

Go / stdlib
Introduced in: 0 Fixed in: 1.25.9
Fix go get stdlib@v1.25.9

References