CVE-2026-32281

Go standard library crypto/x509

Prioridad media: es grave, pero no se conoce explotación

Validating certificate chains which use policies is unexpectedly inefficient when certificates in the chain contain a very large number of policy mappings, possibly causing denial of service. This only affects validation of otherwise trusted certificate chains, issued by a root CA in the VerifyOptions.Roots CertPool, or in the system certificate pool.

En las noticias

• Múltiples vulnerabilidades en productos de Splunk · INCIBE-CERT