CVE-2025-22874: Undefined Security Weakness

Calling Verify with a VerifyOptions.KeyUsages that contains ExtKeyUsageAny unintentionally disabledpolicy validation. This only affected certificate chains which contain policy graphs, which are rather uncommon...

Updated golang packages fix security vulnerabilities

Proxy-Authorization and Proxy-Authenticate headers persisted on cross-origin redirects potentially leaking sensitive information. CVE-2025-4673. os: inconsistent handling of OCREATE|OEXCL on Unix and Windows os.OpenFilepath, os.OCREATE|OEXCL behaved differently on Unix and Windows systems when th...

PT-2025-23988

Name of the Vulnerable Software and Affected Versions The product name cannot be determined. Description The issue arises when calling Verify with a VerifyOptions.KeyUsages that contains ExtKeyUsageAny, which unintentionally disables policy validation. This affects certificate chains containing...