EUVD-2025-206854Published
Unexpected session resumption in crypto/tls
Explicit identifiers and source references
These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.
CVE-2025-68121 · Microsoft / collected KEV context
cve-program · CVE-2025-68121
- https://groups.google.com/g/golang-announce/c/K09ubi9FQFk
- https://go.dev/cl/737700
- https://go.dev/issue/77217
- https://pkg.go.dev/vuln/GO-2026-4337
euvd · EUVD-2025-206854
- https://groups.google.com/g/golang-announce/c/K09ubi9FQFk
- https://go.dev/cl/737700
- https://go.dev/issue/77217
- https://pkg.go.dev/vuln/GO-2026-4337
nvd · CVE-2025-68121
- https://go.dev/cl/737700
- https://go.dev/issue/77217
- https://groups.google.com/g/golang-announce/c/K09ubi9FQFk
- https://pkg.go.dev/vuln/GO-2026-4337
osv · GO-2026-4337
Related operational evidence
Explicit CVE identifiers- During session resumption in crypto/tls, if the underlying Config has its ClientCAs or RootCAs fields mutated between the initial handshake and the resumed handshake, the resumed handshake may succeed when it should have failed. This may ha… · Advisory content revised · 11 Nov 2026
- During session resumption in crypto/tls, if the underlying Config has its ClientCAs or RootCAs fields mutated between the initial handshake and the resumed handshake, the resumed handshake may succeed when it should have failed. This may ha… · Advisory content revised · 9 Nov 2026
- During session resumption in crypto/tls, if the underlying Config has its ClientCAs or RootCAs fields mutated between the initial handshake and the resumed handshake, the resumed handshake may succeed when it should have failed. This may ha… · Advisory content revised · 5 Nov 2026
- During session resumption in crypto/tls, if the underlying Config has its ClientCAs or RootCAs fields mutated between the initial handshake and the resumed handshake, the resumed handshake may succeed when it should have failed. This may ha… · Advisory content revised · 1 Nov 2026
- Release Notes - 2026-03-05 · Tool release · 11 Mar 2026