CVE-2025-58187 Quadratic complexity when checking name constraints in crypto/x509

[
  {
    "vendor": "Go standard library",
    "product": "crypto/x509",
    "collectionURL": "https://pkg.go.dev",
    "packageName": "crypto/x509",
    "versions": [
      {
        "version": "0",
        "lessThan": "1.24.9",
        "status": "affected",
        "versionType": "semver"
      },
      {
        "version": "1.25.0",
        "lessThan": "1.25.3",
        "status": "affected",
        "versionType": "semver"
      }
    ],
    "programRoutines": [
      {
        "name": "parseSANExtension"
      },
      {
        "name": "domainToReverseLabels"
      },
      {
        "name": "CertPool.AppendCertsFromPEM"
      },
      {
        "name": "Certificate.CheckCRLSignature"
      },
      {
        "name": "Certificate.CheckSignature"
      },
      {
        "name": "Certificate.CheckSignatureFrom"
      },
      {
        "name": "Certificate.CreateCRL"
      },
      {
        "name": "Certificate.Verify"
      },
      {
        "name": "CertificateRequest.CheckSignature"
      },
      {
        "name": "CreateCertificate"
      },
      {
        "name": "CreateCertificateRequest"
      },
      {
        "name": "CreateRevocationList"
      },
      {
        "name": "DecryptPEMBlock"
      },
      {
        "name": "EncryptPEMBlock"
      },
      {
        "name": "MarshalECPrivateKey"
      },
      {
        "name": "MarshalPKCS1PrivateKey"
      },
      {
        "name": "MarshalPKCS1PublicKey"
      },
      {
        "name": "MarshalPKCS8PrivateKey"
      },
      {
        "name": "MarshalPKIXPublicKey"
      },
      {
        "name": "ParseCRL"
      },
      {
        "name": "ParseCertificate"
      },
      {
        "name": "ParseCertificateRequest"
      },
      {
        "name": "ParseCertificates"
      },
      {
        "name": "ParseDERCRL"
      },
      {
        "name": "ParseECPrivateKey"
      },
      {
        "name": "ParsePKCS1PrivateKey"
      },
      {
        "name": "ParsePKCS1PublicKey"
      },
      {
        "name": "ParsePKCS8PrivateKey"
      },
      {
        "name": "ParsePKIXPublicKey"
      },
      {
        "name": "ParseRevocationList"
      },
      {
        "name": "RevocationList.CheckSignatureFrom"
      },
      {
        "name": "SetFallbackRoots"
      },
      {
        "name": "SystemCertPool"
      }
    ],
    "defaultStatus": "unaffected"
  }
]