Vulnerability GO-2026-4599
Unknown
UNKNOWN RISK
Vulnerabilities without an assigned CVSS score. Severity is not determinable from available data.
8 months ago
March 06, 2026 at 09:03 PM UTC
Incorrect enforcement of email constraints in crypto/x509
>=1.26.0-0 <1.26.1
>=1.26.0-0 <1.26.1
Summary
Incorrect enforcement of email constraints in crypto/x509
Details
When verifying a certificate chain which contains a certificate containing multiple email address constraints which share common local portions but different domain portions, these constraints will not be properly applied, and only the last constraint will be considered.
References
Related Vulnerabilities
Other vulnerabilities affecting the same packages
Unknown
2 days ago
HTTP/1 server crash due to MaxBytesReader header race in net/http
<1.26.11, >=1.27.0-0 <1.27.4 GO-2026-6859
<1.26.11, >=1.27.0-0 <1.27.4 GO-2026-6859
Unknown
23 days ago
Distrust compromised intermediate certificates in crypto/x509
<1.26.10, >=1.27.0-0 <1.27.3 GO-2026-6809
<1.26.10, >=1.27.0-0 <1.27.3 GO-2026-6809
Unknown
1 month ago
Reset context tracking on consecutive template expressions in html/template
<1.26.9, >=1.27.0-0 <1.27.2 GO-2026-6599
<1.26.9, >=1.27.0-0 <1.27.2 GO-2026-6599
Unknown
1 month ago
Recognize yield as regexp preceder keyword in html/template
<1.26.9, >=1.27.0-0 <1.27.2 GO-2026-6600
<1.26.9, >=1.27.0-0 <1.27.2 GO-2026-6600
Unknown
1 month ago
HTTP/2 server memory exhaustion due to Trailer headers in net/http
<1.26.9, >=1.27.0-0 <1.27.2 GO-2026-6603
<1.26.9, >=1.27.0-0 <1.27.2 GO-2026-6603
Impacted packages
Timeline
Published
8 months ago
March 06, 2026 at 09:03 PM UTC
Last Modified
1 hour ago
November 13, 2026 at 07:12 PM UTC