CVE-2025-61727

Microsoft · Published December 6, 2025

6.5

CVSS v3.1

MEDIUM

Patch availableGet patch

Description

Improper application of excluded DNS name constraints when verifying wildcard names in crypto/x509. Improper application of excluded DNS name constraints when verifying wildcard names in crypto/x509

Affected Products

cbl2 golang 1.18.8-10 on CBL Mariner 2.0
azl3 golang 1.26.0-1 on Azure Linux 3.0
azl3 golang 1.25.7-1 on Azure Linux 3.0
azl3 golang 1.25.8-1 on Azure Linux 3.0

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N