CVE-2026-32280
Unexpected work during chain building in crypto/x509
CVSS Score
7.5
EPSS Score
0.6%
EPSS Percentile
46th
During chain building, the amount of work that is done is not correctly limited when a large number of intermediate certificates are passed in VerifyOptions.Intermediates, which can lead to a denial of service. This affects both direct users of crypto/x509 and users of crypto/tls.
| Vendor | go standard library |
| Product | crypto/x509 |
| Published | Apr 8, 2026 |
| Last Updated | Jul 28, 2026 |
Stay Ahead of the Next One
Get instant alerts for go standard library crypto/x509
Be the first to know when new high vulnerabilities affecting go standard library crypto/x509 are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
Go standard library / crypto/x509
0 < 1.25.9 1.26.0-0 < 1.26.2
References
go.dev: https://go.dev/cl/758320 go.dev: https://go.dev/issue/78282 groups.google.com: https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU pkg.go.dev: https://pkg.go.dev/vuln/GO-2026-4947 access.redhat.com: https://access.redhat.com/security/cve/CVE-2026-32280 bugzilla.redhat.com: https://bugzilla.redhat.com/show_bug.cgi?id=2456339 security.access.redhat.com: https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-32280.json access.redhat.com: https://access.redhat.com/errata/RHSA-2026:24762 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:41019 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:16101 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:24761 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:28886 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:28961 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:34097 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:21655 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:25180 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:27076 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:14391 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:36796 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:28047 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:23244 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:39810 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:34365 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:20569 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:23103 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:19715 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:16024 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:19550 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:18032 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:18027 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:17084 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:19719 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:19750 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:20570 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:22713 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:19714 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:20571 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:19450 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:10217 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:29195 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:23102 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:19133 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:22141 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:19144 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:19135 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:24470 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:22130 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:29035 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:24716 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:33722 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:10704 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:16875 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:11507 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:11514 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:15980 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:19634 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:34192 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:34196 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:34197 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:19721 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:20607 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:20608 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:19722 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:16021 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:20556 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:19839 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:28038 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:19720 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:22709 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:17287 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:24337 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:20609 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:14200 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:10219 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:29455 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:29703 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:19350 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:19353 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:26447 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:22309 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:29702 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:28074 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:26571 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:26636 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:25089 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:26585 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:22862 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:22347 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:23345 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:16874 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:29854 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:26568 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:25127 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:13791 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:36319 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:13829 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:20889 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:13545 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:21338 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:13826 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:36651 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:40945 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:40118 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:22485 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:41928 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:24977 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:24359 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:21772 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:11688 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:16476 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:16477 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:16534 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:16505 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:16532 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:16508 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:16535 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:16537 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:16542 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:14162 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:9385 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:39894 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:21017 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:24853 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:19375 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:22465 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:22840 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:23361 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:24478 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:42043 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:22960 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:42047 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:22958 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:22962 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:42050 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:22959 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:42051 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:22961 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:42049 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:21769 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:14020 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:28441 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:22422 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:22268 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:22415 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:28198 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:28196 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:22258 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:22260
Credits
Jakub Ciolek - https://ciolek.dev