EUVD-2025-36736Published
Quadratic complexity when parsing some invalid inputs in encoding/pem
Explicit identifiers and source references
These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.
CVE-2025-61723 · Microsoft / collected KEV context
cve-program · CVE-2025-61723
- https://go.dev/issue/75676
- https://go.dev/cl/709858
- https://groups.google.com/g/golang-announce/c/4Emdl2iQ_bI
- https://pkg.go.dev/vuln/GO-2025-4009
euvd · EUVD-2025-36736
- https://go.dev/issue/75676
- https://go.dev/cl/709858
- https://groups.google.com/g/golang-announce/c/4Emdl2iQ_bI
- https://pkg.go.dev/vuln/GO-2025-4009
nvd · CVE-2025-61723
- https://go.dev/cl/709858
- https://go.dev/issue/75676
- https://groups.google.com/g/golang-announce/c/4Emdl2iQ_bI
- https://pkg.go.dev/vuln/GO-2025-4009
- http://www.openwall.com/lists/oss-security/2025/10/08/1
osv · GO-2025-4009
Related operational evidence
Explicit CVE identifiers- Release 2026-01-04 · Tool release · 9 Jan 2026