{"id":"EUVD-2025-201106","revision":"81a13e3207a74859b2f5bff9ca845189","records":[{"revision":"81a13e3207a74859b2f5bff9ca845189","observedAt":"2026-11-05T02:54:26.22+00:00","statement":{"source":"euvd","id":"EUVD-2025-201106","aliases":["CVE-2025-61727","GHSA-5mh9-3jwc-rp59"],"title":"An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. For example a constraint that excludes the subdomain test.example.com does not prevent a leaf certificate from cla…","description":"An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. For example a constraint that excludes the subdomain test.example.com does not prevent a leaf certificate from claiming the SAN *.example.com.","state":0,"publishedAt":null,"modifiedAt":null,"affected":[],"metrics":[{"system":"EUVD CVSS 3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","score":6.5,"severity":null}],"references":["https://go.dev/cl/723900","https://go.dev/issue/76442","https://groups.google.com/g/golang-announce/c/8FJoBkPddm4","https://pkg.go.dev/vuln/GO-2025-4175"],"sourceUrl":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-201106","license":"ENISA EUVD · source terms and attribution apply","enrichment":{"sourceStatus":null,"weaknesses":[],"productCriteria":[],"sourceDates":{"datePublished":"Dec 3, 2025, 7:37:15 PM","dateUpdated":"Dec 3, 2025, 10:06:17 PM"},"relatedAdvisories":[{"id":"RHSA-2026:7070","title":"Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update","vulnerabilityIds":["CVE-2025-61727"]},{"id":"SUSE-SU-2025:21193-1","title":"Security update for go1.24","vulnerabilityIds":["CVE-2025-47912","CVE-2025-58183","CVE-2025-58185","CVE-2025-58186","CVE-2025-58187","CVE-2025-58188","CVE-2025-58189","CVE-2025-61723","CVE-2025-61724","CVE-2025-61725","CVE-2025-61727","CVE-2025-61729"]},{"id":"RHSA-2026:7291","title":"Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update","vulnerabilityIds":["CVE-2025-22873","CVE-2025-47910","CVE-2025-47911","CVE-2025-47912","CVE-2025-47914","CVE-2025-58181","CVE-2025-58183","CVE-2025-58185","CVE-2025-58186","CVE-2025-58187","CVE-2025-58188","CVE-2025-58189","CVE-2025-58190","CVE-2025-61723","CVE-2025-61724","CVE-2025-61725","CVE-2025-61726","CVE-2025-61727","CVE-2025-61728","CVE-2025-61729","CVE-2025-61730","CVE-2025-61731","CVE-2025-61732","CVE-2025-68119","CVE-2025-68121","CVE-2026-25679","CVE-2026-27137","CVE-2026-27138","CVE-2026-27139","CVE-2026-27141","CVE-2026-27142","CVE-2026-27143","CVE-2026-27144","CVE-2026-32281","CVE-2026-32282","CVE-2026-32283","CVE-2026-32288","CVE-2026-32289","CVE-2026-33809","CVE-2026-33810"]},{"id":"RHSA-2026:7385","title":"Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update","vulnerabilityIds":["CVE-2025-22873","CVE-2025-47910","CVE-2025-47911","CVE-2025-47912","CVE-2025-47914","CVE-2025-58181","CVE-2025-58183","CVE-2025-58185","CVE-2025-58186","CVE-2025-58187","CVE-2025-58188","CVE-2025-58189","CVE-2025-58190","CVE-2025-61723","CVE-2025-61724","CVE-2025-61725","CVE-2025-61726","CVE-2025-61727","CVE-2025-61728","CVE-2025-61729","CVE-2025-61730","CVE-2025-61731","CVE-2025-61732","CVE-2025-68119","CVE-2025-68121","CVE-2026-25679","CVE-2026-27139","CVE-2026-27141","CVE-2026-27143","CVE-2026-27144","CVE-2026-32281","CVE-2026-32282","CVE-2026-32283","CVE-2026-32288","CVE-2026-32289","CVE-2026-33809","CVE-2026-33813","CVE-2026-42503"]},{"id":"openSUSE-SU-2025:15817-1","title":"buildpacks-cli-0.39.1-1.1 on GA media","vulnerabilityIds":["CVE-2025-61727","CVE-2025-61729"]},{"id":"openSUSE-SU-2025:20158-1","title":"Security update for go1.24","vulnerabilityIds":["CVE-2025-47912","CVE-2025-58183","CVE-2025-58185","CVE-2025-58186","CVE-2025-58187","CVE-2025-58188","CVE-2025-58189","CVE-2025-61723","CVE-2025-61724","CVE-2025-61725","CVE-2025-61727","CVE-2025-61729"]},{"id":"openSUSE-SU-2025:20157-1","title":"Security update for go1.25","vulnerabilityIds":["CVE-2025-47910","CVE-2025-47912","CVE-2025-58183","CVE-2025-58185","CVE-2025-58186","CVE-2025-58187","CVE-2025-58188","CVE-2025-58189","CVE-2025-61723","CVE-2025-61724","CVE-2025-61725","CVE-2025-61727","CVE-2025-61729"]},{"id":"openSUSE-SU-2025:15796-1","title":"go1.24-1.24.11-1.1 on GA media","vulnerabilityIds":["CVE-2025-61727","CVE-2025-61729"]},{"id":"SUSE-SU-2025:4336-1","title":"Security update for go1.25","vulnerabilityIds":["CVE-2025-61727","CVE-2025-61729"]},{"id":"openSUSE-SU-2025:15807-1","title":"regclient-0.11.1-1.1 on GA media","vulnerabilityIds":["CVE-2025-61727","CVE-2025-61729"]},{"id":"SUSE-SU-2026:0298-1","title":"Security update for go1.25-openssl","vulnerabilityIds":["CVE-2025-4674","CVE-2025-47906","CVE-2025-47907","CVE-2025-47910","CVE-2025-47912","CVE-2025-58183","CVE-2025-58185","CVE-2025-58186","CVE-2025-58187","CVE-2025-58188","CVE-2025-58189","CVE-2025-61723","CVE-2025-61724","CVE-2025-61725","CVE-2025-61726","CVE-2025-61727","CVE-2025-61728","CVE-2025-61729","CVE-2025-61730","CVE-2025-61731","CVE-2025-68119","CVE-2025-68121"]},{"id":"RHSA-2026:1042","title":"Red Hat Security Advisory: cert-manager Operator for Red Hat OpenShift 1.18.1","vulnerabilityIds":["CVE-2025-61727","CVE-2025-61729","CVE-2025-66418","CVE-2025-66471","CVE-2026-21441"]},{"id":"RHSA-2026:0990","title":"Red Hat Security Advisory: cert-manager Operator for Red Hat OpenShift 1.18.1","vulnerabilityIds":["CVE-2025-61727","CVE-2025-61729","CVE-2025-66418","CVE-2025-66471","CVE-2026-21441"]},{"id":"WID-SEC-W-2025-2724","title":"Golang Go: Mehrere Schwachstellen","vulnerabilityIds":["CVE-2025-61727","CVE-2025-61729"]},{"id":"SUSE-SU-2026:0308-1","title":"Security update for go1.24-openssl","vulnerabilityIds":["CVE-2025-47912","CVE-2025-58183","CVE-2025-58185","CVE-2025-58186","CVE-2025-58187","CVE-2025-58188","CVE-2025-58189","CVE-2025-61723","CVE-2025-61724","CVE-2025-61725","CVE-2025-61726","CVE-2025-61727","CVE-2025-61728","CVE-2025-61729","CVE-2025-61730","CVE-2025-61731","CVE-2025-68119","CVE-2025-68121"]},{"id":"openSUSE-SU-2026:10031-1","title":"kubelogin-0.2.14-1.1 on GA media","vulnerabilityIds":["CVE-2025-61727"]},{"id":"SUSE-SU-2025:21192-1","title":"Security update for go1.25","vulnerabilityIds":["CVE-2025-47910","CVE-2025-47912","CVE-2025-58183","CVE-2025-58185","CVE-2025-58186","CVE-2025-58187","CVE-2025-58188","CVE-2025-58189","CVE-2025-61723","CVE-2025-61724","CVE-2025-61725","CVE-2025-61727","CVE-2025-61729"]},{"id":"RHSA-2026:1168","title":"Red Hat Security Advisory: cert-manager Operator for Red Hat OpenShift 1.18.1","vulnerabilityIds":["CVE-2025-61727","CVE-2025-61729","CVE-2025-66418","CVE-2025-66471","CVE-2026-21441"]},{"id":"SUSE-SU-2026:0296-1","title":"Security update for go1.24-openssl","vulnerabilityIds":["CVE-2025-47912","CVE-2025-58183","CVE-2025-58185","CVE-2025-58186","CVE-2025-58187","CVE-2025-58188","CVE-2025-58189","CVE-2025-61723","CVE-2025-61724","CVE-2025-61725","CVE-2025-61726","CVE-2025-61727","CVE-2025-61728","CVE-2025-61729","CVE-2025-61730","CVE-2025-61731","CVE-2025-68119","CVE-2025-68121"]},{"id":"SUSE-SU-2026:20623-1","title":"Security update for go1.25-openssl","vulnerabilityIds":["CVE-2025-47912","CVE-2025-58183","CVE-2025-58185","CVE-2025-58186","CVE-2025-58187","CVE-2025-58188","CVE-2025-58189","CVE-2025-61723","CVE-2025-61724","CVE-2025-61725","CVE-2025-61726","CVE-2025-61727","CVE-2025-61728","CVE-2025-61729","CVE-2025-61730","CVE-2025-61731","CVE-2025-68119","CVE-2025-68121"]},{"id":"SUSE-SU-2026:20629-1","title":"Security update for go1.24-openssl","vulnerabilityIds":["CVE-2025-47912","CVE-2025-58183","CVE-2025-58185","CVE-2025-58186","CVE-2025-58187","CVE-2025-58188","CVE-2025-58189","CVE-2025-61723","CVE-2025-61724","CVE-2025-61725","CVE-2025-61726","CVE-2025-61727","CVE-2025-61728","CVE-2025-61729","CVE-2025-61730","CVE-2025-61731","CVE-2025-61732","CVE-2025-68119","CVE-2025-68121"]},{"id":"WID-SEC-W-2026-0328","title":"IBM App Connect Enterprise Certified Container: Mehrere Schwachstellen","vulnerabilityIds":["CVE-2025-13491","CVE-2025-61727","CVE-2025-61729","CVE-2026-0621","CVE-2026-21226","CVE-2026-22817","CVE-2026-22818"]},{"id":"SUSE-SU-2026:0297-1","title":"Security update for go1.25-openssl","vulnerabilityIds":["CVE-2025-4674","CVE-2025-47906","CVE-2025-47907","CVE-2025-47910","CVE-2025-47912","CVE-2025-58183","CVE-2025-58185","CVE-2025-58186","CVE-2025-58187","CVE-2025-58188","CVE-2025-58189","CVE-2025-61723","CVE-2025-61724","CVE-2025-61725","CVE-2025-61726","CVE-2025-61727","CVE-2025-61728","CVE-2025-61729","CVE-2025-61730","CVE-2025-61731","CVE-2025-68119","CVE-2025-68121"]},{"id":"msrc_CVE-2025-61727","title":"Improper application of excluded DNS name constraints when verifying wildcard names in crypto/x509","vulnerabilityIds":["CVE-2025-61727"]},{"id":"openSUSE-SU-2025:15795-1","title":"go1.25-1.25.5-1.1 on GA media","vulnerabilityIds":["CVE-2025-61727","CVE-2025-61729"]},{"id":"SUSE-SU-2025:4337-1","title":"Security update for go1.24","vulnerabilityIds":["CVE-2025-61727","CVE-2025-61729"]},{"id":"openSUSE-SU-2026:20308-1","title":"Security update for go1.24-openssl","vulnerabilityIds":["CVE-2025-47912","CVE-2025-58183","CVE-2025-58185","CVE-2025-58186","CVE-2025-58187","CVE-2025-58188","CVE-2025-58189","CVE-2025-61723","CVE-2025-61724","CVE-2025-61725","CVE-2025-61726","CVE-2025-61727","CVE-2025-61728","CVE-2025-61729","CVE-2025-61730","CVE-2025-61731","CVE-2025-61732","CVE-2025-68119","CVE-2025-68121"]},{"id":"openSUSE-SU-2026:20301-1","title":"Security update for go1.25-openssl","vulnerabilityIds":["CVE-2025-47912","CVE-2025-58183","CVE-2025-58185","CVE-2025-58186","CVE-2025-58187","CVE-2025-58188","CVE-2025-58189","CVE-2025-61723","CVE-2025-61724","CVE-2025-61725","CVE-2025-61726","CVE-2025-61727","CVE-2025-61728","CVE-2025-61729","CVE-2025-61730","CVE-2025-61731","CVE-2025-68119","CVE-2025-68121"]}],"note":"EUVD source date text has no stated timezone and is retained without inventing a UTC instant. Related bulletin membership is not an alias, common cause or applicability claim. A missing vector with a zero score is treated as unrated. Complete vendor/product and underlying source evidence remains in the original JSON."},"key":"euvd:EUVD-2025-201106","identifiers":["EUVD-2025-201106","CVE-2025-61727","GHSA-5mh9-3jwc-rp59"]},"retained":false,"historicalAffected":[]}],"coverage":[]}