GO-2021-0223 Certificate verification error on Windows in crypto/x509

On Windows, if VerifyOptions.Roots is nil, Certificate.Verify does not check the EKU requirements specified in VerifyOptions.KeyUsages. This may allow a certificate to be used for an unintended purpose...

CVE-2020-14039: Improper Certificate Validation

In Go before 1.13.13 and 1.14.x before 1.14.5, Certificate.Verify may lack a check on the VerifyOptions.KeyUsages EKU requirements if VerifyOptions.Roots equals nil and the installation is on Windows. Thus, X.509 certificate verification is incomplete...

PT-2020-13858

Name of the Vulnerable Software and Affected Versions Go versions prior to 1.13.13 Go versions 1.14.x prior to 1.14.5 Description The issue concerns incomplete X.509 certificate verification. Specifically, in certain conditions on Windows, the Certificate.Verify function may not check the EKU...