CVE-2026-27137

CVE-2026-27137 is a vulnerability in the Go programming language's crypto/x509 package. When verifying a certificate chain that includes a certificate with multiple email address constraints sharing common local portions but different domain portions, only the last constraint is enforced instead ...