云虫漏洞情报

CVE-2026-42508 - Previously, a revoked 'SignatureKey' belonging to a CA was not correctly checked for revocation. Now, both the 'key' and 'key.SignatureKey' are checked for @revoked. - 漏洞详情

漏洞编号:CVE-2026-42508

风险等级:危急

漏洞来源:CVE

CVE 编号:CVE-2026-42508

CNNVD 编号:-

厂商/产品:golang / crypto

影响范围:cpe:2.3:a:golang:crypto:*:*:*:*:*:go:*:*

CWE:CWE-295

发布/更新时间:2026-05-22 / 2026-08-28

漏洞描述

Previously, a revoked 'SignatureKey' belonging to a CA was not correctly checked for revocation. Now, both the 'key' and 'key.SignatureKey' are checked for @revoked.

相关链接

相关漏洞

« 返回首页