CVE-2025-58188

🗓️ 29 Oct 2025 22:10:14Reported by GoType

CVE-2025-58188 causes panic when validating certificates with DSA keys due to an interface cast in certificate chain validation.

Reporter	Title	Published	Views	Family All 1026
IBM Security Bulletins	Security Bulletin: IBM Guardium Data Security Center is affected by multiple vulnerabilities	1 Dec 202516:17	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to Improper Certificate Validation in crypto/x509 [CVE-2025-58188]	14 Apr 202616:52	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Guardium Data Security Center is affected by multiple vulnerabilities	23 Jan 202620:43	–	ibm
IBM Security Bulletins	Security Bulletin: Certificate Name Constraints Algorithm Vulnerable to Non-Linear Processing DoS affects watsonx.data	8 Apr 202606:45	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM MQ Operator and Queue manager container images	24 Mar 202606:56	–	ibm
IBM Security Bulletins	Security Bulletin: IBM App Connect Enterprise Certified Container is vulnerable to denial of service and loss of confidentiality due to several findings in Golang binaries	19 Dec 202515:28	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple secuirty vulnerabilies addressed with IBM Business Automation Workflow containers January 2026	30 Jan 202617:17	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities for EDB Cloudpack for Data CP4D 5.3.1	1 Apr 202606:00	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities affect IBM watsonx Orchestrate with watsonx Assistant Cartridge	22 Jan 202602:58	–	ibm
IBM Security Bulletins	Security Bulletin: ELM on Hybrid Cloud vulnerabilities addressed in 2.0.0	20 Apr 202609:57	–	ibm

NVD

Node

golang goRange<1.24.8

golang goRange1.25.0–1.25.2

[
  {
    "vendor": "Go standard library",
    "product": "crypto/x509",
    "collectionURL": "https://pkg.go.dev",
    "packageName": "crypto/x509",
    "versions": [
      {
        "version": "0",
        "lessThan": "1.24.8",
        "status": "affected",
        "versionType": "semver"
      },
      {
        "version": "1.25.0",
        "lessThan": "1.25.2",
        "status": "affected",
        "versionType": "semver"
      }
    ],
    "programRoutines": [
      {
        "name": "alreadyInChain"
      },
      {
        "name": "Certificate.Verify"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

Source	Link
pkg	www.pkg.go.dev/vuln/GO-2025-4013
go	www.go.dev/cl/709853
go	www.go.dev/issue/75675
groups	www.groups.google.com/g/golang-announce/c/4Emdl2iQ_bI
openwall	www.openwall.com/lists/oss-security/2025/10/08/1

29 Jan 2026 15:55Current

6.6Medium risk

Vulners AI Score6.6

CVSS 3.17.5

EPSS0.00012

SSVC

CWE-295