When verifying a certificate chain which contains a certificate containing multiple email address constraints which share common local portions but different domain portions, these constraints will not be properly applied, and only the last constraint will be considered.
References
Configurations
History
21 Jul 2026, 12:17
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
17 Jul 2026, 13:18
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
15 Jul 2026, 12:17
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
09 Jul 2026, 13:16
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
30 Jun 2026, 03:17
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
21 Apr 2026, 14:40
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://go.dev/cl/752182 - Mailing List | |
| References | () https://go.dev/issue/77952 - Issue Tracking | |
| References | () https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk - Release Notes | |
| References | () https://pkg.go.dev/vuln/GO-2026-4599 - Vendor Advisory | |
| CWE | CWE-295 | |
| CPE | cpe:2.3:a:golang:go:1.26.0:*:*:*:*:*:*:* | |
| First Time |
Golang go
Golang |
10 Mar 2026, 18:18
| Type | Values Removed | Values Added |
|---|---|---|
| Summary |
|
|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 7.5 |
06 Mar 2026, 22:16
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2026-03-06 22:16
Updated : 2026-08-04 13:17
NVD link : CVE-2026-27137
Mitre link : CVE-2026-27137
CVE.ORG link : CVE-2026-27137
JSON object : View
Products Affected
golang
- go
CWE
CWE-295
Improper Certificate Validation
