CVE-2025-61727

A vulnerability exists where an excluded subdomain constraint in a certificate chain fails to restrict the use of wildcard SANs in the leaf certificate. For instance, a constraint excluding test.example.com does not prevent a leaf from claiming *.example.com. This issue affects several components...