Using ParsePKCS1PrivateKey to parse a RSA key that is missing the CRT values would panic when verifying that the key is well formed.
{ "review_status": "REVIEWED", "url": "https://pkg.go.dev/vuln/GO-2025-3421" }
{ "imports": [ { "symbols": [ "ParsePKCS1PrivateKey" ], "path": "crypto/x509" } ] }