AZL-79628

See a problem?

Import Source

https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-79628.json

JSON Data

https://api.test.osv.dev/v1/vulns/AZL-79628

Upstream

CVE-2026-27137

Published

2026-03-06T22:16:00Z

Modified

2026-04-01T05:23:30.987669Z

Summary

CVE-2026-27137 affecting package golang 1.26.0-1

Details

When verifying a certificate chain which contains a certificate containing multiple email address constraints which share common local portions but different domain portions, these constraints will not be properly applied, and only the last constraint will be considered.

References

https://nvd.nist.gov/vuln/detail/CVE-2026-27137

Affected packages

Azure Linux:3 / golang

Package

Name: golang
Purl: pkg:rpm/azure-linux/golang

Affected ranges

Type: ECOSYSTEM
Events: Introduced

1.26.0

Last affected

1.26.0-1

Database specific

source

"https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-79628.json"