1 matches found
AZL-98574 CVE-2020-14039 affecting package golang 1.27.1-1
In Go before 1.13.13 and 1.14.x before 1.14.5, Certificate.Verify may lack a check on the VerifyOptions.KeyUsages EKU requirements if VerifyOptions.Roots equals nil and the installation is on Windows. Thus, X.509 certificate verification is incomplete...
5.3CVSS0.01762EPSS
SaveExploits0References1
20