CVE-2025-61730 Handshake messages may be processed at the incorrect encryption level in crypto/tls

[
  {
    "vendor": "Go standard library",
    "product": "crypto/tls",
    "collectionURL": "https://pkg.go.dev",
    "packageName": "crypto/tls",
    "versions": [
      {
        "version": "0",
        "lessThan": "1.24.12",
        "status": "affected",
        "versionType": "semver"
      },
      {
        "version": "1.25.0",
        "lessThan": "1.25.6",
        "status": "affected",
        "versionType": "semver"
      }
    ],
    "programRoutines": [
      {
        "name": "Conn.handleKeyUpdate"
      },
      {
        "name": "Conn.handshakeContext"
      },
      {
        "name": "clientHandshakeStateTLS13.establishHandshakeKeys"
      },
      {
        "name": "clientHandshakeStateTLS13.readServerFinished"
      },
      {
        "name": "clientHandshakeStateTLS13.sendClientFinished"
      },
      {
        "name": "serverHandshakeStateTLS13.checkForResumption"
      },
      {
        "name": "serverHandshakeStateTLS13.doHelloRetryRequest"
      },
      {
        "name": "serverHandshakeStateTLS13.sendServerParameters"
      },
      {
        "name": "serverHandshakeStateTLS13.sendServerFinished"
      },
      {
        "name": "serverHandshakeStateTLS13.readClientFinished"
      },
      {
        "name": "Conn.quicSetReadSecret"
      },
      {
        "name": "Conn.Handshake"
      },
      {
        "name": "Conn.HandshakeContext"
      },
      {
        "name": "Conn.Read"
      },
      {
        "name": "Conn.Write"
      },
      {
        "name": "Dial"
      },
      {
        "name": "DialWithDialer"
      },
      {
        "name": "Dialer.Dial"
      },
      {
        "name": "Dialer.DialContext"
      },
      {
        "name": "QUICConn.HandleData"
      },
      {
        "name": "QUICConn.Start"
      }
    ],
    "defaultStatus": "unaffected"
  }
]