Lucene search
+L

1 matches found

OSV
OSV
added 2020/07/17 4:15 p.m.5 views

AZL-98574 CVE-2020-14039 affecting package golang 1.27.1-1

In Go before 1.13.13 and 1.14.x before 1.14.5, Certificate.Verify may lack a check on the VerifyOptions.KeyUsages EKU requirements if VerifyOptions.Roots equals nil and the installation is on Windows. Thus, X.509 certificate verification is incomplete...

5.3CVSS0.01762EPSS
SaveExploits0References1
Rows per page
Query Builder