MEDIUM

CVE-2026-55960 Un-negotiated Raw Public Key (RFC 7250) accepted in place of X.509, bypassing chain validation

Microsoft Security Response Center • Jul 01, 2026

MEDIUM

CVE-2026-6731 X.509 name constraint bypass via Subject CN treated as a DNS name

Microsoft Security Response Center • Jul 01, 2026

MEDIUM

CVE-2026-10592 Wildcard DNS SAN bypasses CA name-constraint checks

Microsoft Security Response Center • Jul 01, 2026

HIGH

VU#862559: crypton-x509-validation Haskell libraries do not enforce X.509 NameConstraints

CERT/CC • Jun 11, 2026

MEDIUM

CVE-2025-61727 Improper application of excluded DNS name constraints when verifying wildcard names in crypto/x509

Microsoft Security Response Center • Jun 03, 2026

MEDIUM

CVE-2025-58188 Panic when validating certificates with DSA public keys in crypto/x509

Microsoft Security Response Center • Jun 03, 2026

MEDIUM

CVE-2026-31430 X.509: Fix out-of-bounds access when parsing extensions

Microsoft Security Response Center • Apr 22, 2026

MEDIUM

CVE-2026-32281 Inefficient policy validation in crypto/x509

Microsoft Security Response Center • Apr 15, 2026

MEDIUM

CVE-2026-32280 Unexpected work during chain building in crypto/x509

Microsoft Security Response Center • Apr 15, 2026