AZL-82328
See a problem?- Import Source
- https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-82328.json
- JSON Data
- https://api.osv.dev/v1/vulns/AZL-82328
- Upstream
- Published
- 2026-04-08T02:16:03Z
- Modified
- 2026-08-28T17:47:55.872450500Z
- Summary
- CVE-2026-33810 affecting package golang for versions less than 1.25.9-1
- Details
-
When verifying a certificate chain containing excluded DNS constraints, these constraints are not correctly applied to wildcard DNS SANs which use a different case than the constraint. This only affects validation of otherwise trusted certificate chains, issued by a root CA in the VerifyOptions.Roots CertPool, or in the system certificate pool.
- References