CVE-2023-45287

score

<0.1

cvss

7.5

epss

1.2%

published

2023-12-05

kev added

—

first seen

2026-10-21

Go versions before 1.20 using RSA-based TLS key exchanges with math/big library contain a potential timing side channel caused by non-constant time RSA operations, letting attackers recover session key bits, exploit requires network access to TLS handshake.