https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 13:05:19 +0000 https://cve.radiocsirt.org/vuln/bdu:2026-00268 bdu:2026-00268 https://cve.radiocsirt.org/vuln/bdu:2026-00268 https://cve.radiocsirt.org/vuln/bell-cve-2025-61727 <p><strong>Affected:</strong> Alpaquita:23: go, Alpaquita:25: go, Alpaquita:stream: docker, Alpaquita:stream: go, BellSoft Hardened Containers:23: go, BellSoft Hardened Containers:25: go, BellSoft Hardened Containers:stream: go</p> <p><strong>Affected:</strong> Alpaquita:23: go, Alpaquita:25: go, Alpaquita:stream: docker, Alpaquita:stream: go, BellSoft Hardened Containers:23: go, BellSoft Hardened Containers:25: go, BellSoft Hardened Containers:stream: go</p> https://cve.radiocsirt.org/vuln/bell-cve-2025-61727 https://cve.radiocsirt.org/vuln/bit-golang-2025-61727 <p><strong>Affected:</strong> Bitnami: golang</p> <p>An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. For example a constraint that excludes the subdomain test.example.com does not prevent a leaf certificate from claiming the SAN *.example.com.</p> <p><strong>Affected:</strong> Bitnami: golang</p> <p>An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. For example a constraint that excludes the subdomain test.example.com does not prevent a leaf certificate from claiming the SAN *.example.com.</p> https://cve.radiocsirt.org/vuln/bit-golang-2025-61727 https://cve.radiocsirt.org/vuln/certfr-2025-avi-1078 certfr-2025-avi-1078 https://cve.radiocsirt.org/vuln/certfr-2025-avi-1078 https://cve.radiocsirt.org/vuln/cleanstart-2026-ad15516 <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> CleanStart: prometheus-redis-exporter-fips</p> <p>Package prometheus-redis-exporter-fips version 1.77.0-r0 fixes 2 vulnerabilities: CVE-2025-61727, CVE-2025-61729</p> <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> CleanStart: prometheus-redis-exporter-fips</p> <p>Package prometheus-redis-exporter-fips version 1.77.0-r0 fixes 2 vulnerabilities: CVE-2025-61727, CVE-2025-61729</p> https://cve.radiocsirt.org/vuln/cleanstart-2026-ad15516 https://cve.radiocsirt.org/vuln/euvd-2026-262521 EUVD-2026-262521 https://cve.radiocsirt.org/vuln/euvd-2026-262521 https://cve.radiocsirt.org/vuln/fkie_cve-2025-61727 <p>An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. For example a constraint that excludes the subdomain test.example.com does not prevent a leaf certificate from claiming the SAN *.example.com.</p> <p>An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. For example a constraint that excludes the subdomain test.example.com does not prevent a leaf certificate from claiming the SAN *.example.com.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-61727 https://cve.radiocsirt.org/vuln/ghsa-5mh9-3jwc-rp59 <p>An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. For example a constraint that excludes the subdomain test.example.com does not prevent a leaf certificate from claiming the SAN *.example.com.</p> <p>An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. For example a constraint that excludes the subdomain test.example.com does not prevent a leaf certificate from claiming the SAN *.example.com.</p> https://cve.radiocsirt.org/vuln/ghsa-5mh9-3jwc-rp59 https://cve.radiocsirt.org/vuln/msrc_cve-2025-61727 msrc_CVE-2025-61727 https://cve.radiocsirt.org/vuln/msrc_cve-2025-61727 https://cve.radiocsirt.org/vuln/oesa-2025-2863 <p><strong>Affected:</strong> openEuler:20.03-LTS-SP4: golang</p> <p>. Security Fix(es):</p> <p>crypto/x509: Exclude subdomain constraints do not restrict wildcard SANs Exclude subdomain constraints in certificate chains do not restrict the use of wildcard SANs in leaf certificates. For example, excluding the constraint on the subdomain test.example.com does not prevent the leaf certificate from claiming SAN*. example.com.(CVE-2025-61727)</p> <p><strong>Affected:</strong> openEuler:20.03-LTS-SP4: golang</p> <p>. Security Fix(es):</p> <p>crypto/x509: Exclude subdomain constraints do not restrict wildcard SANs Exclude subdomain constraints in certificate chains do not restrict the use of wildcard SANs in leaf certificates. For example, excluding the constraint on the subdomain test.example.com does not prevent the leaf certificate from claiming SAN*. example.com.(CVE-2025-61727)</p> https://cve.radiocsirt.org/vuln/oesa-2025-2863 https://cve.radiocsirt.org/vuln/opensuse-su-2025:15795-1 <p>go1.25-1.25.5-1.1 on GA media</p> <p>go1.25-1.25.5-1.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2025:15795-1 https://cve.radiocsirt.org/vuln/rhsa-2026:0990 <p>golang: crypto/x509: excluded subdomain constraint does not restrict wildcard SANs crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate urllib3: urllib3: Unbounded decompression chain leads to resource exhaustion urllib3: urllib3 Streaming API improperly handles highly compressed data urllib3: urllib3 vulnerable to decompression-bomb safeguard bypass when following HTTP redirects (streaming API)</p> <p>golang: crypto/x509: excluded subdomain constraint does not restrict wildcard SANs crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate urllib3: urllib3: Unbounded decompression chain leads to resource exhaustion urllib3: urllib3 Streaming API improperly handles highly compressed data urllib3: urllib3 vulnerable to decompression-bomb safeguard bypass when following HTTP redirects (streaming API)</p> https://cve.radiocsirt.org/vuln/rhsa-2026:0990 https://cve.radiocsirt.org/vuln/suse-su-2025:21192-1 <p>Security update for go1.25</p> <p>Security update for go1.25</p> https://cve.radiocsirt.org/vuln/suse-su-2025:21192-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-61727 <p><strong>Affected:</strong> Ubuntu:22.04:LTS: golang-1.24, Ubuntu:24.04:LTS: golang-1.24, Ubuntu:25.10: golang-1.24, Ubuntu:25.10: golang-1.25, Ubuntu:26.04:LTS: golang-1.24, Ubuntu:26.04:LTS: golang-1.25</p> <p>An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. For example a constraint that excludes the subdomain test.example.com does not prevent a leaf certificate from claiming the SAN *.example.com.</p> <p><strong>Affected:</strong> Ubuntu:22.04:LTS: golang-1.24, Ubuntu:24.04:LTS: golang-1.24, Ubuntu:25.10: golang-1.24, Ubuntu:25.10: golang-1.25, Ubuntu:26.04:LTS: golang-1.24, Ubuntu:26.04:LTS: golang-1.25</p> <p>An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. For example a constraint that excludes the subdomain test.example.com does not prevent a leaf certificate from claiming the SAN *.example.com.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-61727 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2724 <p>Ein Angreifer kann mehrere Schwachstellen in Golang Go ausnutzen, um Sicherheitsvorkehrungen zu umgehen, und um einen Denial of Service Angriff durchzuführen.</p> <p>Ein Angreifer kann mehrere Schwachstellen in Golang Go ausnutzen, um Sicherheitsvorkehrungen zu umgehen, und um einen Denial of Service Angriff durchzuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2724