CVE-2025-61729 — Excessive resource consumption when printing error string for host certificate validation in crypto/x509

Affected: Go standard library crypto/x509

Within HostnameError.Error(), when constructing an error string, there is no limit to the number of hosts that will be printed out. Furthermore, the error string is constructed by repeated string concatenation, leading to quadratic runtime. Therefore, a certificate provided by a malicious actor can result in excessive resource consumption.

GHSA-mpwr-8vm7-h73f — package pkcs12: Authentication bypass in Decode functions

Affected: Go: software.sslmate.com/src/go-pkcs12

`Decode`, `DecodeChain`, `DecodeTrustStore`, and `ToPEM` can incorrectly accept PKCS#12 files which were encoded with the wrong password, due to a failure to reject excessively-short PBMAC1 keys. Users who decode PKCS#12 files from untrusted sources and rely on the password for authentication can be tricked into accepting malicious PKCS#12 files. Users who only decode PKCS#12 files from trusted sources are not affected.

Thanks to Pavol Žáčik (Red Hat) and Alex Gaynor (Anthropic) for finding and reporting the same issue in OpenSSL ([CVE-2026-34181](https://openssl-library.org/news/vulnerabilities/#CVE-2026-34181)).

Most recent entries from all

CVE-2025-61729 — Excessive resource consumption when printing error string for host certificate validation in crypto/x509

GHSA-mpwr-8vm7-h73f — package pkcs12: Authentication bypass in Decode functions