panic vulnerability

  1. Go 1.26 CVE-2026-27138 X509 Verification Panic Fixed in 1.26.1

    A new security advisory affecting the Go standard library's crypto/x509 package — tracked as CVE-2026-27138 — warns that certificate chain verification can panic when an intermediate or leaf certificate contains an empty DNS name while another certificate in the same chain includes excluded name...