CVE-2026-32280

score

<0.1

cvss

7.5

epss

0.6%

published

2026-04-08

kev added

—

first seen

2026-10-21

Go crypto/x509 and crypto/tls contain a denial of service caused by improper limitation of work during chain building when many intermediate certificates are passed in VerifyOptions.Intermediates, letting attackers cause resource exhaustion, exploit requires crafted certificate chains.