https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 02:07:29 +0000 https://cve.radiocsirt.org/vuln/cve-2025-61727 <p><strong>Affected:</strong> Go standard library crypto/x509</p> <p>An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. For example a constraint that excludes the subdomain test.example.com does not prevent a leaf certificate from claiming the SAN *.example.com.</p> <p><strong>Affected:</strong> Go standard library crypto/x509</p> <p>An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. For example a constraint that excludes the subdomain test.example.com does not prevent a leaf certificate from claiming the SAN *.example.com.</p> https://cve.radiocsirt.org/vuln/cve-2025-61727 https://cve.radiocsirt.org/vuln/ghsa-273p-m2cw-6833 <p><strong>Affected:</strong> Go: github.com/sigstore/rekor</p> <p>## Summary</p> <p>Rekor’s cose v0.0.1 entry implementation can panic on attacker-controlled input when canonicalizing a proposed entry with an empty `spec.message`. `validate()` returns nil (success) when `message` is empty, leaving `sign1Msg` uninitialized, and `Canonicalize()` later dereferences `v.sign1Msg.Payload`.</p> <p>## Impact</p> <p>A malformed proposed entry of the `cose/v0.0.1` type can cause a panic on a thread within the Rekor process. The thread is recovered so the client receives a 500 error message and service still continues, so the availability impact of this is minimal.</p> <p>## Patches</p> <p>Upgrade to v1.5.0</p> <p>## Workarounds</p> <p>None</p> <p><strong>Affected:</strong> Go: github.com/sigstore/rekor</p> <p>## Summary</p> <p>Rekor’s cose v0.0.1 entry implementation can panic on attacker-controlled input when canonicalizing a proposed entry with an empty `spec.message`. `validate()` returns nil (success) when `message` is empty, leaving `sign1Msg` uninitialized, and `Canonicalize()` later dereferences `v.sign1Msg.Payload`.</p> <p>## Impact</p> <p>A malformed proposed entry of the `cose/v0.0.1` type can cause a panic on a thread within the Rekor process. The thread is recovered so the client receives a 500 error message and service still continues, so the availability impact of this is minimal.</p> <p>## Patches</p> <p>Upgrade to v1.5.0</p> <p>## Workarounds</p> <p>None</p> https://cve.radiocsirt.org/vuln/ghsa-273p-m2cw-6833