UNKNOWN Go
Unexpected work during chain building in crypto/x509
GO-2026-4947 · BIT-golang-2026-32280 · CVE-2026-32280
Published · Modified
AI SAST
Find this class of vulnerability in your own code
Corgea's AI-native static analysis detects vulnerabilities like this one across your repositories, ranks them by exploitability, and returns review-ready fixes.
Description
During chain building, the amount of work that is done is not correctly limited when a large number of intermediate certificates are passed in VerifyOptions.Intermediates, which can lead to a denial of service. This affects both direct users of crypto/x509 and users of crypto/tls.
References
Ready to move
Start Securing
Free, no credit card | First findings in minutes