BIT-golang-2025-61727Published
Improper application of excluded DNS name constraints when verifying wildcard names in crypto/x509
Explicit identifiers and source references
These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.
CVE-2025-61727 · Microsoft / collected KEV context
cve-program · CVE-2025-61727
- https://go.dev/cl/723900
- https://go.dev/issue/76442
- https://groups.google.com/g/golang-announce/c/8FJoBkPddm4
- https://pkg.go.dev/vuln/GO-2025-4175
euvd · EUVD-2025-201106
- https://go.dev/cl/723900
- https://go.dev/issue/76442
- https://groups.google.com/g/golang-announce/c/8FJoBkPddm4
- https://pkg.go.dev/vuln/GO-2025-4175
nvd · CVE-2025-61727
- https://go.dev/cl/723900
- https://go.dev/issue/76442
- https://groups.google.com/g/golang-announce/c/8FJoBkPddm4
- https://pkg.go.dev/vuln/GO-2025-4175
osv · GO-2025-4175
Related operational evidence
Explicit CVE identifiers- Release 2026-02-08 · Tool release · 17 Feb 2026